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Abstract 


-'xo  meet  new  requirements  and  correct  existing  defic¬ 
iencies  SAC  is  upgrading  its  Headquarters  Command  Post  by 
adding  five  state-of-the-art  electronic  systems.  After 
installing  the  systems,  SAC  must  determine  whether  the  equip¬ 
ment  will  be  maintained  by  contractors,  Air  Force  technicians, 
or  a  combination  of  contractor  and  Air  Force  technicians.  If 
Air  Force  technicians  maintain  the  equipment  three  Air  Force 
Specialties  will  be  required. 

The  purpose  of  this  thesis  is  to  develop  a  model  which 


can  be  used  to  determine  the  number  of  Air  Force  technicians 
required  to  maintain  the  equipment  planned  for  the  SAC  Command 
Post  .upgrade.  The  model  was  developed,  tested  and  validated 
using  the  system  science  paradigm  as  a  conceptual  framework 
and  the  Q-GERT  simulation  language  as  the  implementing  tool. 

The  results  of  the  simulation  model  were  analyzed  using 
multiple  analysis  of  variance.  THe  results  indicated  that  two 
technicians  of  each  Air  Force  Specialty,  one  5-level  and  one 
3-level,  were  sufficient  to  provide  an  equipment  availability 
of  greater  than  99  percent.  Furthermore,  the  results  indicate 
that  the  utilization  of  the  technicians  would  be  so  low  that 
the  same  technicians  would  be  able  to  maintain  another  system 
of  similar  size, in  addition  to  the  upgraded  Command  Post 
systems,  and  still. maintain  an  availability  greater  than 
99  percent. 
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A  Q-GERT  MODEL  FOR  DETERMINING 
THE  MAINTENANCE  CREW  SIZE  FOR 


THE  SAC  COMMAND  POST  UPGRADE 

I  INTRODUCTION 

Background 

To  meet  new  requirements  and  correct  existing  defic¬ 
iencies  SAC  decided  to  upgrade  its  Headquarters  Command  Post 
by  adding  five  state-of-the-art  electronic  systems.  These 
electronic  systems,  like  their  predecessors,  will  require 
maintenence  and  SAC  must  decide  upon  a  concept  for  maintain¬ 
ing  them.  Three  concepts  commonly  used  on  the  type  of 
equipment  planned  for  the  SAC  Command  Post  upgrade  are 
contractor  maintenance,  U.S.  Air  Force  "blue  suit"  mainten¬ 
ance,  and  combined  contractor  and  Air  Force  maintenance. 

When  comparing  these  maintenance  concepts, SAC  must 
perform  both  qualitative  and  quantitative  analysis  on  the 
options.  Qualitative  issues  include  such  concepts  as 
control  over  maintenance  personnel,  quality  of  mainten¬ 
ance,  and  responsiveness  to  equipment  outages.  Qualitative 
issues,  then,  are  subjectively  judged  and,  depending  on 
circumstances  may  be  the  overriding  issues  when  choosing 
a  maintenance  concept.  However,  when  qualitative  issues 
are  not  overriding,  or  if  qualitative  judgements  are  not 
decisive,  quantitative  issues  become  important. 
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The  quantitative  issues  normally  associated  with 
maintenance  include  cost  of  logistics  support,  cost  of 
technical  documentation,  and  cost  of  maintenance  personnel. 
When  contractors  provide  maintenance,  they  usually  provide 
the  logistics  support  and  technical  documentation  associated 
with  that  maintenance.  Bids  for  maintenance  contracts  then, 
usually  contain  all  costs  associated  with  maintenance. 

Conversely , when  the  Air  Force  provides  the  maintenance, 
it  must  also  provide  the  logistics  support  and  technical 
documentation.  Air  Force  Logistics  Command  (AFLC)  computes 
the  life  cycle  cost  of  providing  logistics  support  using 
standard  formulas,  and  contractors  submit  costs  for  tech¬ 
nical  documentation  along  with  bids  for  integration  and 
installation  contracts.  However,  to  compute  maintenance 
personnel  costs  Air  Force  Communications  Command  (AJCC) 
needs  to  know  the  number  and  skill  level  mix  of  the  main¬ 
tenance  personnel  required  for  a  system. 

Currently,  though,  SAC  does  not  know  the  number  or 
skill  level  mix  of  maintenance  personnel  required  to  main¬ 
tain  the  equipment  planned  for  the  upgraded  SAC  Command 
Post.  Furthermore,  SAC  does  not  have  a  method  of  determining 
the  required  number  or  skill  levels  of  maintenance  personnel 
for  new  systems.  In  fact,  the  current  method  of  determining 
how  many  maintenance  personnel  are  required  for  a  new 
system  involves  former  maintenance  personnel  making  educated 
guesses.  While  this  method  is  sometimes  successful,  often 
the  guesses  are  wrong,  especially  when  the  system  contains 


2 


a  new  technology. 

These  wrong  guesses  can  cause  severe  short  term  prob¬ 
lems  with  system  maintenance,  especially  if  the  initial  main¬ 
tenance  crew  is  too  small.  Too  few  people  on  the  maintenance 
crew  can  result  in  lower  than  required  system  availability 
and  low  morale  among  the  maintenance  personnel.  On  the  other 
hand,  overestimating  maintenance  crew  size  can  waste  money 
by  spending  too  much  for  Air  Force  maintenance  personnel  or 
hiring  contractors  when  Air  Force  maintenance  would  be  more 
cost  effective.  Accurate  estimates  of  the  maintenance  crew 


size,  then  are  critical  for  making  valid  cost  estimates  to 
compare  contractor  versus  Air  Force  maintenance. 

Problem  Statement 

The  current  method  of  determining  the  number  of  people 
required  to  maintain  an  electronic  system  at  SAC  involves 
experienced  maintenance  personnel  making  educated  guesses. 

No  method  exists,  manual  or  automated,  which  determines  the 
appropriate  number  of  maintenance  personnel  required  to 


maintain  the  electronic  equipment  planned  for  the  SAC 


Command  Post  upgrade.  Before  SAC  can  determine  whether  to 
use  contractor  or  Air  Force  maintenance,  or  a  combination  of 
the  two,  SAC  needs  an  accurate  determination  of  tne  T,vmber 
and  skill  level  mix  of  the  Air  Force  maintenance  personnel 
required  to  maintain  the  upgraded  SaC  Command  Post  (Ref  l). 
Objective 


The  primary  objective  of  this  thesis  is  to  develop 
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test,  and  validate  a  model  which  can  be  used  to  determine 
the  number  and  skill  level  mix  of  Air  Force  maintenance 
personnel  required  to  maintain  the  electronic  systems 
proposed  for  the  SAC  Command  Post  upgrade. 

Subobjectives  include: 

1.  Determination  of  the  sensitivity  of  the  maintenance 
crew  size  to  variance  in  equipment  reliability 
(expressed  in  terms  of  mean  time  between  fail¬ 
ures  (MTBF))  and  maintainability  (expressed  in 
terms  of  mean  time  to  repair  (MTTR)) , system  size 
and  complexity,  spares  level,  and  system  avail¬ 
ability  and  maintenance  »*esponse  requirements. 

2.  Determination  of  the  sensitivity  of  system  avail¬ 
ability  to  variance  in  equipment  reliability  and 
maintainability,  system  size  and  complexity, 
spares  level,  and  maintenance  crew  size. 

Me thodology 

Modeling  the  availability,  reliability,  and  main¬ 
tainability  of  the  systems  planned  for  the  new  SAC  Command 
Post  to  determine  the  appropriate  number  of  maintenance 
personnel  quickly  becomes  too  complex  to  calculate  ana¬ 
lytically.  With  five  separate,  yet  integrated  electronic 
systems  in  the  upgraded  Command  Post,  each  system  containing 
a  variety  of  subsystems,  complete  mathematical  formulation  of 
the  system  availability,  reliability,  and  maintainability 
becomes  extremely  difficult,  if  not  impossible. 


A 


Because  of  the  complexity  of  the  SAC  Command  Post 
systems  and  subsystems,  computer  simulation  was  chosen  for 
the  model.  Of  the  six  conditions  Shannon  lists  for  applica¬ 
tion  of  computer  simulation,  the  following  three  apply  in 
this  case:  (Ref  19:11) 

1.  A  complete  mathematical  formulation  of  the  problem 
does  not  exist  or  analytical  methods  of  solving 
the  mathematical  model  have  not  been  developed. 
Many  waiting  line  (queueing)  models  are  in  this 
category. 

2.  Analytical  methods  are  available,  but  the  math¬ 
ematical  procedures  are  so  complex  and  arduous 
that  simulation  provides  a  simpler  method  of 
solution. 

3.  It  is  desired  to  observe  a  simulated  history  of 
the  process  over  a  period  of  time  in  addition  to 
estimating  certain  parameters. 

When  developing  complex  simulation  models,  the  need 
for  a  conceptual  framework  is  paramount.  The  system  science 
paradigm  suggested  by  Schoderbek,  Schoderbek,  and  Kef alas 
was  chosen  as  the  conceptual  framework  for  the  model  devel¬ 
oped  in  this  thesis.  The  system  science  paradigm  consists 
of  three  phases:  (1)  conceptualization,  (2)  analysis  and 
measurement,  and  (3)  computerization  (Ref  18:295-303). 

In  the  conceptualization  phase  the  scientist  looks  at 
the  system  as  open  and  organic,  having  constant  interactions 
with  its  environment.  The  scientist  therefore  focuses  on 
both  the  system  and  its  environment,  and  models  the  inter¬ 
actions  between  the  system  and  its  environment.  Finally, 
the  scientist  tries  to  understand  as  much  of  this  interaction 
as  possible  (Ref  18:297). 
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The  analysis  and  measurement  phase  of  the  system 
science  paradigm  consists  of  converting  the  conceptual 
model  developed  in  Phase  I  into  a  parametric  model.  When 
developing  a  parametric  model  the  scientist  must  decide: 
(Ref  18:301) 

1.  In  what  language  he  will  express  his  results 
(language). 

2.  To  what  objects  and  in  what  environment  his 
results  will  apply  (specification). 

3.  How  his  results  can  be  used  (standardization). 

4.  How  one  can  assess  the  "truth”  of  the  results 
and  evaluate  their  use  (accuracy  and  control). 

Computerization  involves  translating  the  parametric 
model  developed  in  the  analysis  and  measurement  phase  into 
a  "computer-consumable  project"  (Ref  18:302).  The  results 
of  this  computer  program  will  dictate  the  necessity  to 
repeat  the  first  two  phases.  The  system  science  paradigm, 
then,  is  an  iterative  process  (Ref  18:302,303). 

Overview 

Chapter  I  contains  the  development  of  the  problem 
addressed  in  this  thesis  and  explains  the  approach  taken 
in  this  thesis  to  solve  it.  It  explains  why  the  problem 
exists  and  what  benefits  can  be  expected  from  deriving 
a  solution  to  the  problem. 

Explanation  of  the  development  of  the  conceptualiza¬ 
tion  phase  occurs  in  Chapter  II.  Conceptualization  begins 
with  the  cones  of  resolution  technique  described  by  Schoder 
bek,  Schoderbek,  and  Kefalas  and  uses  causal  diagrams  to 


explain  important  interactions  in  the  third  level  of  reso¬ 
lution.  In  addition,  Chapter  II  shows  the  development  of 
the  equipment  configuration  modeled  in  this  thesis. 

Chapter  III  contains  a  discussion  of  the  analysis  and 
measurement  phase  of  the  system  science  paradigm.  The 
conceptual  model  developed  in  Chapter  II  will  be  analyzed 
to  determine  what  components  and  subsystems  contribute  to 
system  availability.  Additionally,  this  chapter  defines 
system  availability  for  the  system  being  modeled.  Finally, 
Chapter  III  describes  the  parametric  model  developed  from 
the  conceptual  model  and  contains  a  description  of  the 
Q-GERT  model. 

Chapter  IV  discusses  how  the  parametric  model  devel¬ 
oped  in  Chapter  III  is  computerized.  That  is,  this  chapter 
discusses  how  the  Q-GERT  model  is  converted  into  Q-GERT 
and  FORTRAN  code  and  run  on  the  computer.  This  chapter 
describes  how  the  computer  code  works. 

Chapter  V  contains  the  validation  and  verification 
of  the  model.  Justification  for  the  reliability  and  main¬ 
tainability  times  and  probability  distributions  is  provided. 
In  addition,  this  chapter  describes  the  verification  process 
for  determining  that  the  results  obtained  from  this  simula¬ 
tion  are  in  fact  good  and  can  be  used  as  intended. 

Conclusions  and  recommendations  are  contained  in 
Chapter  VI.  Tha  applicability  of  the  results  of  this 
thesis  will  be  discussed  along  with  recommended  extensions. 


II 


CONCEPTUALIZATION 


As  stated  in  Chapter  I,  the  first  phase  of  the  system 
science  paradigm  involves  conceptualization.  In  this  phase 
the  researcher  focuses  on  both  the  system  and  its  environ¬ 
ment,  models  the  interactions  between  the  system  and  its 
envoronment,  and  tries  to  understand  as  much  of  the  inter¬ 
actions  as  possible.  As  suggested  by  Schoderbek,  Schoder- 
bek,  and  Kefalas,  the  cones  of  resolution  technique  proves 
especially  helpful  during  the  conceptualization  phase  (Ref  18: 
297-299). 

With  the  cones  of  resolution  technique  the  researcher 
advances  from  the  abstract  to  the  detailed  by  proceeding 
through  the  levels  of  the  cone.  Level  one  is  the  most 
abstract  level.  In  level  one  the  researcher  takes  a  broad 
look  at  the  system  and  its  environment,  and  chooses  one  of 
the  distinguishable  features  at  that  level.  To  advance  to 
the  second  level  the  researcher  expands  upon  the  feature, 
breaking  it  into  further  distinguishing  features.  The 
process  of  selecting  and  expanding  features,  then,  provides 
a  path  to  each  subsequent  level.  The  researcher,  then, 
proceeds  through  the  levels  of  resolution  until  the  level 
with  the  desired  detail  is  reached. 

as  an  example  of  the  cones  of  resolution  technique 
consider  a  person  planning  a  vacation.  Based  on  the  persons 
interests  and  finances  he  must  decide  where  to  go  for  vaca¬ 
tion.  In  this  case,  the  first  level  of  resolution  is  the 
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entire  world.  Picking  one  country,  say  the  United  States, 
as  a  distinguishable  feature,  the  vacationer  can  advance  to 
the  second  level  of  resolution.  The  vacationer  can  further 
break  the  Unites  States  into  distinguishable  features,  the 
various  states,  and  choose  one,  possibly  California,  thereby 
advancing  to  the  third  level  of  resolution.  California, 
being  a  large  state,  would  be  too  difficult  to  fit  into  one 
vacation,  therefore  the  vacationer  must  also  break  it  into 
distinguishable  features,  possibly  cities,  and  choose  one, 
say  San  Francisco  and  advance  to  the  fourth  level  of  resolu¬ 
tion.  Once  at  the  fourth  level,  the  vacationer  will  choose 
those  distinguishable  features  that  he  wishes  to  visit,  such 
as  the  Golden  Gate  Bridge,  Fishermans  Warf,  and  the  cable 
cars.  This  vacationer's  cones  of  resolution  for  his  vacation 
would  contain  four  levels. 

Figure  1  contains  a  model  of  the  Command  Post  -  Envi¬ 
ronment  Interactions  System  using  cones  of  resolution.  In 
this  model,  level  one  shows  the  simple  relationship  between 
the  Command  Post  and  its  environment.  The  first  level 
provides  little  useful  information  by  itself,  but  provides 
a  logical  step  to  the  second  level. 

Level  two  focuses  on  the  Command  Post  environment. 

This  level  elaborates  the  interactions  of  the  Battle  Staff, 
Controllers,  Emergency  Actions  (EA)  Team,  Support  Centers, 
and  electronic  equipment.  The  interactions  of  greatest 
concern  involve  the  equipment.  In  every  case  the  equipment 
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provides  the  users  with  the  information  needed  to  make 
decisions.  The  third  level,  therefore,  models  the  equip¬ 
ment  sector  of  the  Command  Post  environment. 

Level  three  breaks  the  equipment  sector  into  three 
smaller  sectors  -  availability,  function,  and  configuration. 
To  provide  the  Command  Post  users  with  critical  informal. ion 
when  needed,  the  equipment  must  operate  satisfactorily  for 
long  periods  of  time  (availability).  In  addition,  the  equip¬ 
ment  must  provide  the  information  in  the  form  most  useful 
to  the  Command  Post  users  (function).  Finally,  the  various 
systems  must  be  put  together  in  such  a  way  that  the  users 
can  easily  obtain  the  information  (configuration).  To 
better  explain  the  interactions  of  the  equipment  within  the 
Command  Post  the  next  three  sections  provide  detailed  de¬ 
scriptions  of  the  equipment  availability,  function,  and  con¬ 
figuration. 

Availability 

Availability  is  a  function  of  reliability  and  main¬ 
tainability;  therefore,  before  availability  can  be  defined 
it  is  necessary  to  define  reliability  and  maintainability. 
Kapur  and  Lamberson  provide  the  following  definition  of 
reliability:  (Ref  9:1) 

The  reliability  of  a  system  is  the  probability  that, 
when  operating  under  stated  environmental  conditions, 
the  system  will  perform  its  intended  function  adequate¬ 
ly  for  a  specified  interval  of  time. 

However,  Kapur  and  Lamberson  point  out  three  problems 


with  this  definition:  (Ref  9:1) 

(1)  the  acceptance  of  the  probabilistic  notion  of 
reliability  which  admits  the  possibility  of 
failure , 

(2)  the  concept  of  adequate  performance  for  system 
parameters  that  deteroirate  solely  with  time, 
and 

(3)  the  judgement  necessary  to  determine  the  proper 
statement  of  environmental  conditions. 

Chapter  V  addresses  these  problems  in  explaination  of  the 

analysis  and  measurement  phase  of  the  system  science  paradigm. 

Similarly,  Kapur  and  Lamberson  define  maintainability 


as  "the  probability  that  a  failed  system  can  be  made  operable 
in  a  specified  interval  of  downtime"  (Ref  9:225).  Factors 


contributing  to  downtime  include  failure  detection  time, 
repair  time,  administrative  time,  and  logistics  time.  The 
maintainability  function,  then,  describes  the  probabilistic 
time  a  system  will  remain  in  a  failed  state  (Ref  9:225). 

Using  the  above  definitions  of  reliability  and  main¬ 
tainability,  Kapur  and  Lamberson  provide  the  following 
definition  of  availability:  (Ref  9:225) 

Availability  is  defined  as  the  probability  that  a 
system  is  operating  satisfactorily  at  any  point  in 
time  and  considers  only  operating  time  and  downtime, 
thus  excluding  idle  time.  Availability  is  a  measure 
of  the  ratio  of  the  operating  time  of  the  system  to 
the  operating  time  plus  the  downtime.  Thus  it 
includes  both  reliability  and  maintainability. 

Furthermore,  Kapur  and  Lamberson  define  the  availability 


function  to  be 


Availability  (A)  -  Operating  time 

AvaiiaDxiity  va;  operating  time  +  downtime 

or  equivalently 

^  _ _ Mean  time  to  failure  (MTTF) _ 

Mean  time  to  failure  (MITF)  +  Mean  time  to  repair  (MTTR) 


(1) 

(2) 
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When  using  the  exponential  distribution  to  describe  the 
reliability  function,  equation  (2)  can  be  rewritten  as 

Mean  time  between  failures  (MTBF)  , 

A  "  Mean  time  between  failures  (MTBF)  +  MTTR  ' 

Justification  for  using  the  exponential  distribution  to 

model  equipment  failures  in  this  thesis  is  provided  in 

Chapter  V. 

To  further  explain  the  interactions  associated  with 
availability,  Figure  2  contains  a  causal-loop  diagram  of 
the  factors  contributing  to  availability.  Richardson  and 
Pugh  describe  causal  links  (the  arrows  used  in  causal-loop 
diagrams)  as  follows:  (Ref  17:26) 


A  causal  link  from  A  to  B  is  positive  (1)  if  A  adds 
to  B,  or  (2)  if  a  change  in  A  produces  a  change  in  B 
in  the  same  direction. 


A  causal  link  from  A  to  B  is  negative  (1)  if  A  sub¬ 
tracts  from  B,  or  (2)  if  a  change  in  A  produces  a 
change  in  B  in  the  opposite  direction. 

Thus,  in  Figure  2,  a  low  system  availability  causes 
pressure  to  increase  reliability,  maintainability,  or  main- 
tehance  crew  (size  and  skill),  and  to  decrease  logistics 
time.  Reliability  can  be  increased  by  a  number  of  engin¬ 
eering  changes  including  using  more  reliable  components  and 
designing  redundancy  into  the  system.  Reliability  engin¬ 
eering  should  be  performed  during  the  system  design  phase 
but  can  be  accomplished  any  time  during  the  system  life. 
Increasing  the  system  reliability  will  decrease  the  failure 


rate  which  in  turn  increases  the  operating  time.  An  in¬ 
crease  in  operating  time,  then,  results  in  an  increase 
in  system  availability. 

Similarly,  sound  engineering  practices  can  increase 
maintainability.  Methods  for  improving  maintainability 
include  designing  systems  to  provide  fault  detection  and 
isolation,  and  easy  access  for  replacement  cf  failed  com¬ 
ponents.  Increased  maintainability,  therefore,  reduces 
the  detection  and  repair  time,  which  in  turn  reduces  down¬ 
time,  thereby  increasing  system  availability. 

Low  availability  usually  has  its  most  pronounced 
impact  on  the  maintenance  crews.  A  low  availability  causes 
increased  pressure  on  the  maintenance  crew's  capabilities. 
This  increased  pressure,  then,  causes  an  increase  in  main¬ 
tenance  size  and  skill  level.  As  shown  in  Figure  2,  crew 
size  and  skill  level  are  inversely  proportional.  That  is, 
the  higher  the  worker's  skill  level  the  fewer  the  number 
of  workers  required,  and  the  larger  the  crew  size  the  less 
skill  required. 

As  maintenance  crew  size  or  skill  level  increases 
the  repair  time  generally  decreases.  This  happens  because 
the  more  skilled  maintenance  personnel  can  perform  faster 
repairs,  and  the  larger  crews  can  perform  more  simultaneous 
repairs.  Increased  maintenance  skills  can  also  result  in 
increased  reliability  because  maintenance  personnel  with 
better  skills  generally  induce  fewer  maintenance  related 
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failures.  Therefore,  increasing  the  size  and  skill  level 
of  the  maintenance  crews  decreases  repair  time  and  increases 
reliability.  As  before,  operating  time  will  increase  and 
downtime  will  decrease  resulting  in  a  higher  system  avail¬ 
ability  . 

Logistics  time  is  the  time  required  to  retrieve 
spare  parts  necessary  to  repair  the  equipment.  If  the 
parts  need  to  be  ordered,  downtime  increases  significantly. 
Therefore,  a  low  availability  due  to  a  lack  of  spare  parts 
causes  the  spare  parts  level  to  increase,  thereby  reducing 
the  logistics  time  and  increasing  toe  system  availability. 

Administration  time  is  the  time  it  takes  to  notify 
the  maintenance  personnel  that  a  failure  has  occurred  plus 
the  time  it  takes  for  the  maintenance  supervisor  to  assign 
a  repairman  to  the  repair.  In  general,  the  administration 
time  is  fairly  constant,  and  consists  of  the  operator  of 
the  failed  equipment  calling  Job  Control  and  Job  Control 
notifying  the  work  center.  In  this  thesis  administration 
time  is  included  as  a  part  of  the  mean  time  to  repair  and 
is  assumes  to  take  about  five  minutes  or  one  tenth  of  an 
hour . 

In  addition  to  being  too  low,  availability  can  be 
higher  than  expected.  Usually  considered  good,  high  avail¬ 
ability  can  indicate  waste,  such  as  idle  maintenance  per¬ 
sonnel  and  too  many  spares.  When  this  occurs,  excess 
maintenance  personnel  and  spare  parts  can  be  eliminated, 


as  long  as  the  availability  remains  higher  than  the  required 
availability. 

The  causal-loop  diagram  in  Figure  2,  then,  shows 
the  relationship  of  system  availability  with  reliability 
and  maintanability ,  and  maintanance  crew  size  and  skill 
level.  The  next  section  describes  the  function  of  the 
five  electronic  systems  planned  for  the  SAC  Command  Post 
upgrade . 

Function 

SAC  plans  to  integrate  five  state-of-the-art  elec¬ 
tronic  systems  into  the  upgraded  Command  Post.  Each  of 
these  systems  -  upgraded  voice  communications.  Improved 
Large  Wall  Screen  Display  (ILWSD)  systems,  secure  closed 
circuit  television(CCTV) ,  local  area  network,  and  automated 
data  processing  (ADP)  support  -  provide  a  unique  function 
and  all  five  systems  will  be  integrated  to  benefit  the 
Command  Post  users  (Ref  5:35). 

Voice  Communications  Upgrade.  The  voice  communica¬ 
tions  upgrade  will  expand  the  existing  voice  communications 
capabilities  while  consolidating  these  capabilities  into  one 
system.  SAC  will  accomplish  this  consolidation  by  installing 
a  Special  Private  Line  Telephone  System  (SPLTS).  SPLTS 
will  provide  the  following  capabilities:  (Ref  5:39-44) 

1.  Each  SPLTS  console  will  contain  only  one  handset. 

2.  Users  can  make  both  secure  (Red)  and  unsecure 
(Black)  calls  from  the  same  instrument. 
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3.  Users  can  place  a  Red  (or  Black)  call  on  hold 
while  making  (or  answering)  another  call  on  any 
Black  (or  Red)  line. 

4.  SPLTS  will  use  Dual-Tone  Multiple  Frequency  (DTMF) 
touchtone  dial  pads. 

5.  The  system  provides  three  Red  conference  circuits. 

6.  SPLTS  will  interface  with  the  following  voice 
communications  lines:  (Ref  5:44) 

-  SPEAKEASE  secure  voice  terminals 

-  AUTOS EVOCOM 

-  PARKHILL  secure  voice  terminals 

-  Hotlines 

-  Command  Post  PBX  (including  SOCS) 

-  Base  Central  Office  dial  lines 

-  Public  address  (PA) 

-  Intercom 

-  Radio 

-  Line  monitors 

The  SAC  Command  Post  voice  communications  upgrade 
will  also  include  installation  of  SPEAKEASY  (formerly 
VINSON)  secure  voice  terminals.  SPEAKEASY  terminals  will 
provide  high  quality,  full  duplex  secure  voice  communica¬ 
tion  over  unconditioned  narrowband  transmission  media. 

In  addition,  SPEAKEASY  is  compatible  with  the  existing 
AUTOSEVOCOM  system  (Ref  5:36-38). 

Finally,  the  voice  communications  upgrade  will  in¬ 
clude  expanding  the  newly  acquired  SOCS  Diminsion  PBX  to 
accomodate  all  external  Command  Post  communications. 

External  lines  include  AUTOVON,  DDD,  Off-Premise  extensions, 
foreign  exchanges,  WATS,  hotlines,  Command  Post  PBX  Sub¬ 
scribers,  and  a  tie-trunk  to  the  Base  telephone  exchange 
(Ref  5). 
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Improved  Large  Wall  Screen  Display  (ILWSD).  The 
ILWSD  system  will  consist  of  image  generation  and  display 
equipment.  The  image  generation  equipment  will  accept  data 
from  one  or  more  host  computers  and  convert  the  data  into 
text  and  graphics  images,  and  send  the  images  as  video 
signals  to  the  display  devices. 

The  display  equipment  will  consist  of  eight  high 
resolution  television  projectors  and  approximately  12 
high  resolution  color  television  monitors .  The  projectors 
will  provide  displays  to  the  Senior  Battle  Staff  on  eight 
large  wall  projection  screens.  These  large  screen  displays 
will  be  used  for  briefings,  tours,  and  other  Command  Post 
functions  requiring  a  large  number  of  people  to  view  the 
same  displays.  The  high  resolution  color  television  monitors 
will  provide  other  users  with  the  same  displays  as  projected 
on  the  large  wall  screen. 

Closed  Circuit  Television  (CCTV).  Consisting  of 
briefer  stations,  television  recording  and  playback  equip¬ 
ment,  television  monitors,  and  a  distribution  network,  the 
CCTV  system  will  provide  the  live  and  recorded  audio  and 
video  capabilities  required  by  the  SAC  Command  Post  and  its 
support  centers.  The  briefer  stations,  consisting  of  tele¬ 
vision  cameras  and  microphones,  and  the  color  monitors  will 
allow  remote  briefings  and  video  conferencing  over  the 
distribution  network.  The  television  recording  and  playback 
equipment  will  supplement  this  capability  by  providing 


pre-recorded  briefings  for  tours  and  training. 

Local  Area  Network  (LAN).  The  LAN  proposed  for  the 
SAC  Command  Post  upgrade  will  have  several  functions.  First 
the  LAN  will  connect  Command  Post  ADP  equipment  to  a  common 
data  base  for  routine  tasks  such  as  rosters  and  checklists, 
and  could  allow  interpositional  conferencing  for  Command  Post 
and  support  center  users.  Second,  the  LAN  will  connect  the 
Command  Post  and  support  center  users  with  external  networks 
such  as  the  WWMCCS  Information  System  (WIS)  to  provide 
qu’ck  access  to  information.  Finally,  the  LAN  could  connect 
the  image  generation  equipment  (of  the  ILWSD  system)  to  the 
host  computers.  I 

I 

j 

Automated  Data  Processing  (ADP).  The  ADP  upgrade  wi  11 
consist  of  two  separate  activities.  The  first  activity 
involves  upgrading  the  WWMCCS  computer  at  SAC  by  adding 
memory,  upgrading  the  five  CPU's,  and  replacing  the  com¬ 
munication  front  end  (Datanet  335's)  with  new  Datanet  6678's 


This  upgrade  will  provide  the  SAC  Command  Post  with  the 

i 

necessary  response  time  and  computer  power  to  last  until  the 
WWMCCS  replacement  system  becomes  available  in  the  late 
1980's (Ref  5). 

The  second  activity  involves  installing  mini-  and 
micro-computers  in  the  Command  Post.  These  small  computers 


will  attach  to  the  LAN  to  provide  the  following  features: 

a.  Local  File  Management  and  Computational  Support 

b.  Remote  Data  Retrieval  and  Display 

c.  Automated  Text  Message  Handling 

d.  Graphic  Display  Support 

e.  Inter-Positional  Conferencing 
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To  understand  how  the  five,  functional  systems  will 
operate  as  one  integrated  system  it  is  necessary  to  under¬ 
stand  the  configuration  of  the  upgraded  SAC  Command  Post. 
The  following  section  describes  the  proposed  SAC  Command 
Post  configuration. 

Configuration 

Figure  3  illustrates  the  proposed  SAC  Command  Post 
equipment  configuration.  With  this  proposed  configuration 
the  ILWSD  and  Command  Post  ADP  will  interface  with  the 
host  computer  systems  through  the  LAN.  The  network,  then 
will  allow  all  terminals  to  communicate  with  the  host 
computer,  Command  Post  mini-computer,  ILWSD  display  compu¬ 
ters,  and  other  Command  Post  ADP  terminals.  Also,  with  this 
configuration  the  CCTV  distribution  network  interfaces  the 
live  and  recorded  video  signals  with  the  color  television 
monitors  and  large  screen  projectors.  Finally  Figure  3 
illustrates  that  all  telephone  handsets  will  interface  with 
Red  and  Black  communications  circuits  via  the  SPLTS  equip¬ 
ment.  The  following  paragraphs  provide  a  detailed  descrip¬ 
tion  of  the  equipment  configuration  in  the  upgraded  SAC 
Command  Post. 

Voice  Communications.  The  upgraded  SAC  Command  Post 
will  contain  three  categories  of  voice  communications  equip¬ 
ment,  all  three  categories  based  on  SPLTS  implementation. 
Category  I  equipment  will  provide  the  Senior  Battle  Staff 
with  access  to  the  Base  PBX,  Command  Post/SOCCS  PBX,  Foreign 
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Figure  3.  Proposed  SAC  Command  Post  Configuration  simplified 
Block  Diagram 
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exchanges,  internal  secure  voice,  intercom,  and  PA  micro¬ 
phones.  Current  plans  call  for  18  Category  I  SPLTS  console 
positions.  Figure  4  provides  a  sample  layout  for  Category  I 
SPLTS  consoles. 

Category  II  equipment  will  provide  the  Support  Battle 

Staff  with  the  same  service  as  the  Category  I  equipment 

plus  direct  access  to  AUTOVON  and  SPEAKEASY  secure  voice. 

•• 

Currently  SAC  has  not  determined  the  exact  number  of  Category 
II  consoles  needed  but  based  on  the  current  number  of  Support 
Battle  Staff  positions  and  conversation  with  MITRE  personnel 
working  on  the  Command  Post  upgrade  approximately  30  Category 
II  consoles  will  be  installed  (Ref  5  ).  Figure  5  contains 
a  sample  layout  for  Category  II  consoles. 

Similarly,  Category  III  SPLTS  consoles  contain  the 
capabilities  of  the  other  two  consoles  plus  AUTOVON  pre¬ 
cedence/preemption,  AUT0SEV0C0M,  PARKHILL  secure  voice, 
hot  lines,  and  radio.  Currently  SAC  plans  to  install 
five  Category  III  consoles,  one  each  for  the  Senior  Con¬ 
troller,  Warning  Systems  Controller,  and  Emergency  Actions 
Team,  and  two  for  the  Communications  Controller.  Figure  6 
provides  a  sample  layout  of  the  Category  III  SPLTS  consoles. 

Figure  7  contains  a  block  diagram  of  the  proposed 
upgraded  voice  communications  system.  The  diagram  shows 
that  each  position  contains  a  telephone  handset  connected 
to  a  SPLTS  console.  Each  SPLTS  console,  then,  connects  to 
a  transfer  circuit  which  separates  and  isolates  the  Red  and 


Figure  5.  Category  II  Support  Battle  Staff  Consoles  (Ref  5) 
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Figure  6.  Category  III  -  Communications  Controller  Console  (Ref  5) 


Clack  circuits.  In  addition,  the  Category  II  and  III  SPLTS 
consoles  are  connected  directly  to  the  SPEAKEASY  secure 
voice  equipment.  From  the  transfer  circuits  the  Red  tele¬ 
phone  lines  are  connected  to  the  Red  Switch  for  connection 
with  internal  secure  voice  circuits  and  world  wide  secure 
voice.  Similarly,  the  Black  telephone  lines  connect  the 
transfer  circuits  to  the  dedicates  Command  Post  and  SOCCS 
PBX  (Black  Switch),  the  base  telephone  system,  and  the 
off  base  telephone  system. 

Improved  Large  Wall  Screen  Display  (ILWSD)  System. 

The  ILWSD  System  consists  of  display  computers  and  storage 
devices,  image  generators,  video  switches,  large  screen  pro¬ 
jectors,  and  color  television  monitors.  Figure  8  illustrates 
the  configuration  of  the  ILWSD  system.  With  the  proposed 
configuration,  the  display  computer  will  receive  display 
data  from  the  host  computer  either  directly  or  via  the  LAN. 
The  display  data,  then,  will  be  stored  on  the  display 
storage  devices  for  recall  at  a  later  time.  When  the 

display  computer  receives  a  request  for  a  display  from  the . . 

Display  Controller,  via  the  LAN,  the  display  data  will  be 
read  from  the  display  storage  device  and  sent  to  one  of  the 
image  generators.  The  image  generator  will  then  convert  the 
display  data  into  a  display  and  send  it  to  the  video  switches 
as  video  signals.  Using  the  switch  controls,  the  Display 
Controller  will  route  the  video  signals  to  the  desired 
display  device. 
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Figure  9  contains  a  block  diagram  of  the  display 
computer  and  storage  device.  Data  from  the  host  computer 
and  requests  for  displays  from  the  Display  Controller  will  be 
received  by  the  interface  board  and  sent  to  the  memory 
board  for  temporary  storage.  The  CPU  board,  then,  decodes 
the  data  to  determine  if  it  is  a  display  for  storage  or  a 
request  for  a  display.  If  the  data  is  a  display  for  storage 
the  CPU  board  sends  the  data  to  the  100  megabyte  disk  (the 
display  storage  device)  to  be  stored  for  future  use.  If, 
however,  the  data  is  a  request  for  a  display  the  CPU  gets 
the  proper  display  from  the  disk  and  sends  it  to  an  image 
generator  via  the  image  genetator  interface  board.  In  this 
configuration  two  display  computers  and  display  storage 
devices  will  be  used  for  greater  system  reliability. 

The  image  generator  will  contain  seven  boards  - 
one  processor  board,  four  refresh  (display)  memory  boards, 
and  two  blink  and  output  control  boards  (see  Figure  10). 

The  processor  board  will  receive  the  display  data  directly 
from  an  image  generator  interface  board  in  the  display 
computer  and  store  the  data  in  an  on-board  memory.  It  will 
then  process  the  data  and  store  the  resulting  display  in 
two  of  the  four  refresh  memory  boards.  The  display  in  the 
memory  boards  is  an  exact  replica  of  the  display  to  be 
provided  to  the  display  devices.  After  the  display  is 
built  in  the  image  generator  refresh  memory  boards,  the 
blink  and  output  control  board  associated  with  the  memory 
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IMAGE  GENERATOR  #2 
(SAME  AS  IMAGE  GENERATOR  #1) 

IMAGE  GENERATOR  #3 
(SAME  AS  IMAGE  GENERATOR  #1) 


IMAGE  GENERATOR  #4 
(SAME  AS  IMAGE  GENERATOR  #1) 


IMAGE  GENERATOR  #5 
(SAME  AS  IMAGE  GENERATOR  #1) 


IMAGE  GENERATOR  #6 
(SAME  AS  IMAGE  GENERATOR  #1) 


Figure  10.  Image  Generator  Block  Diagram 
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boards  containing  the  display  converts  the  stored  image  into 
video  signals  and  sends  the  video  signals  to  the  video 
switches  for  distribution.  In  addition  to  converting  the 
stored  image  into  video  signals,  the  blink  and  output  control 
board  also  controls  the  blinking  of  selected  portions  of  the 
display.  The  video  signals  sent  to  the  video  switch  will 
be  broken  down  into  the  three  primary  colors,  red,  green 
and  blue,  so  that  the  display  projected  on  the  large  screens 
and  provided  on  the  color  monitors  will  be  in  full  color. 

Figure  11  provides  a  block  diagram  of  the  video 
switches.  In  this  diagram,  only  one-third  of  the  switches 
is  shown,  the  other  two- thirds  being  identical  and  each 
third  carrying  one  of  the  primary  color  video  signals. 

The  proposed  switch  will  be  a  20  by  20  matrix,  12  of  the 
input  signals  provided  by  the  image  generators  ar.d  the  other 
input  signals  provided  by  the  CCTV  system  and  the  Command 
Center  Processing  and  Display  System  (CCPDS).  Each  of  the 
input  signals  will  be  applied  to  twenty  20  by  1  video 
switches.  Each  of  the  20  by  1  video  switches  is  independent 
from  the  other  switches,  and  failure  of  one  switch  does  not 
affect  any  of  the  other  20  by  1  video  switches.  Only  the 
power  supplies  are  common  to  all  of  the  switches,  and  re¬ 
dundant  power  supplies  are  used  to  increase  the  system 
reliability.  In  the  proposed  configuration , any  combination 
of  input  video  signals  will  be  capable  of  being  routed  to 
any  output  line.  Furthermore,  the  controls  for  switching 
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Figure  11.  Video  Switches  Block  Diagram 
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is  independent  for  each  switch.  After  the  video  signals 
are  switched  the  output  video  signals  will  be  sent  to  the 
appropriate  large  wall  screen  projector  or  color  television 
monitor . 

Closed  Circuit  Television  System.  The  CCTV  system 
consists  of  television  cameras,  microphones,  television 
monitors,  and  a  distribution  network.  Figure  12  illus¬ 
trates  the  configuration  proposed  for  a  broadband  (CATV) 
system.  In  this  configuration  12  television  cameras  and 
microphones,  one  in  each  support  center  and  four  in  the 
Command  Post,  feed  video  and  audio  signals  into  an  RF  mod¬ 
ulator.  The  RF  modulator  then  puts  each  channel  of  infor¬ 
mation  on  a  Separate  carrier  frequency  and  sends  all  channels 
of  information  to  the  CCTV  monitors  on  one  cable.  Each 
television  monitor,  then,  selects  the  desired  channel  and 
demodulates  the  signal  for  display. 

Local  Area  Network  and  Command  Post  ADP.  The  local 
area  network  (LAN)  will  consist  of  a  coaxial  cable  connecting 
interface  units.  Four  types  of  interface  units  will  be  used 
with  the  Command  Post  LAN,  host  computer  unterface  units  (IU), 
work  station  IUs,  common  user  IUs,  and  gateways  to  other 
local  area  networks.  The  host  computer  IUs  will  interface 
the  WWMCCS  computer  and  possibly  the  SACDIN  and  CCPDS  com¬ 
puters  with  the  LAN;  work  station  interface  units  (WSIUs) 
will  interface  all  of  the  ADP  with  the  LAN;  and  common  user 
or  computer  IUs  will  interface  the  display  computers  and 


Figure  12.  CCTV  Block  Diagram 


the  Command  Post  mini-computers  with  the  LAN.  Figure  13 
illustrates  the  proposed  configuration  of  the  LAN  and  the 
Command  Post  ADP  for  the  SAC  Command  Post  upgrade. 

In  this  figure  it  can  be  seen  that  the  LAN  will 
connect  the  host  computer,  display  computers,  Command  Post 
mini-computer,  graphics  terminals  and  alphanumeric  terminals 
to  the  LAN.  In  this  configuration  the  graphics  terminals 
are  the  WWMCCS  terminals  currently  being  used  in  the  Command 
Post  and  the  Support  Centers.  The  alphanumeric  terminals, 
on  the  other  hand,  represent  new  equipment  and  will  include 
hard  copy  units. 

The  above  sections  have  described  the  cones  of  reso¬ 
lution  technique  used  to  narrow  the  problem  into  a  manage¬ 
able  size,  and  have  explained  the  factors  affecting  the 
availability,  function  and  configuration  of  the  Command 
Post  equipment.  The  following  chapter  will  use  the  infor¬ 
mation  discussed  above  in  the  formulation  of  a  parametric 
model  of  the  Command  post  equipment.  The  model,  when  com¬ 
puterized,  will  be  helpful  in  determining  the  number  of 
maintenance  personnel  required  to  maintain  the  equipment 
planned  for  the  SAC  Command  Post  upgrade. 
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III.  ANALYSIS  AND  MEASUREMENT 


The  conceptualization  phase  of  the  system  science 
paradigm,  as  it  applies  to  the  problem  addressed  in  this 
thesis,  was  presented  in  Chapter  II.  In  that  chapter  the 
cones  of  resolution  technique,  a  causal-loop  diagram,  and 

several  block  diagrams  were  employed  to  illustrate  the 

% 

interactions  between  the  SAC  Command  Post  and  its  environ¬ 
ment,  as  well  as  the  interactions  and  relationships  of  the 
sectors  of  concern  within  the  Command  Post  environment.  The 
analysis  and  measurement  phase  presented  in  Chapter  III 
builds  on  the  conceptual  model  developed  in  Chapter  II. 

Parameterization  of  the  conceptual  model  begins  with 
an  explaination  of  why  Q-GERT  was  chosen  to  be  the  language 
that  the  model  was  written  in,  and  continues  by  explaining 
how  a  system  is  modeled  using  Q-GERT.  The  following  section 
explains  how  the  operation  and  maintenance  of  the  upgraded 
Command  Post  equipment  was  described  using  a  schematic  dia¬ 
gram.  Next,  the  Q-GERT  symbols  used  in  this  thesis  are 
explained.  Finally,  the  last  section  explains  the  Q-GERT 
network  that  forms  the  parametric  model  developed  in  this 
chapter. 

Language 

The  Q-GERT  language  was  chosen  for  this  simulation  be¬ 
cause  of  its  simplicity  of  use  and  its  adaplability  to  model¬ 
ing  waiting  line  situations.  Q-GERT  is  a  language  developed 
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by  A.  Alan  B.  Pritsker  as  "...  a  network  modeling  vehicle 
and  a  computer  analysis  tool. "(Ref  16:vii)  GERT,  an 
acronym  for  Graphic  Evaluation  and  Review  Technique,  allows 
the  analyst  to  model  projects  that  can  be  analyzed  using 
PERT  and  CPM  techniques.  In  addition,  the  Q  in  Q-GERT 
indicates  the  capability  of  the  language  to  model  queueing 
systems  (Ref  16:vii). 

When  modeling  with  Q-GERT,  the  analyst  must  clearly 
and  unambiguously  describe  the  system  being  modeled.  One 
particularly  helpful  tool  in  describing  a  system  is  sche¬ 
matic  or  pictorial  diagrams.  With  a  schematic  diagram 
the  analyst  usually  represents  transactions  or  entities 
within  the  system  as  symbols  and  represents  activities 
associated  with  the  transactions  as  arcs  or  lines  connect¬ 
ing  the  symbols.  Figure  14  is  a  schematic  diagram  of  the 
system  being  modeled  in  this  thesis. 

Next,  the  analyst  must  draw  a  Q-GERT  representation 
of  the  system  being  modeled.  The  Q-GERT  diagram  consists 
of  nodes,  which  can  represent  starting  points,  queues, 
decision  points,  and  so  forth;  and  arcs,  whichrepresent 
activities.  Figure  15  contains  examples  of  the  types  of 
nodes  and  activities  used  in  this  thesis.  For  a  complete 
list  of  Q-GERT  nodes  and  activities  see  Pritsker  (Ref  16). 

After  representing  the  system  in  a  Q-GERT  diagram, 
the  analyst  must  convert  the  diagram  into  Q-GERT  and  FORTRAN 
code.  Conversion  of  the  diagram  into  computer  code  is  part 
of  the  computerization  phase  of  the  system  science  paradigm 
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and  thus  will  be  discussed  in  Chapter  IV.  The  following 
sections  are  devoted  to  describing,  in  detail,  the  sche¬ 
matic  diagram  and  the  Q-GERT  diagrams  of  the  system  being 
modeled  for  this  thesis. 

Schematic  Diagrams 

As  stated  earlier;  Figure  14  is  a  schematic  diagram  of 
the  maintenance  of  the  equipment  planned  for  the  SAC  Command 
Post  upgrade.  The  clear  circles  at  the  left  of  the  figure 
represent  the  equipment  as  they  operate  satisfactorily. 
Equipment  failure,  represented  by  the  arcs  labeled  "failure", 
occurs  when  an  equipment  no  longer  operates  satisfactorily. 
When  an  equipment  failure  occurs,  the  equipment  operator  calls 
Job  Control  who  in  turn  notifies  the  responsible  shift  super¬ 
visor.  The  shift  supervisor,  then,  assigns  technicians  *o 
repair  the  broken  equipment  (represented  by  the  squares)  or 
places  the  equipment  in  a  queue  called  awaiting  maintenance 
(AWM)  (represented  by  the  circled  Xs)  based  on  the  following 
conditions: 

1.  If  the  required  number  of  qualified  technicians 
are  idle,  the  technicians  will  be  assigned  the 
repair  task. 

2.  If  the  required  number  of  qualified  technicians 
are  busy  repairing  spare  line  replaceable  units 
(LRUs),  repair  of  the  spare  LRUs  will  be  inter¬ 
rupted  and  the  technicians  assigned  to  repair  the 
broken  equipment. 
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3.  If  all  qualified  technicians  are  busy  repairing 
broken  equipment,  the  new  failure  will  be  placed 
in  AWM  status  (the  broken  equipment  queue)  until 
qualified  technicians  become  available.  If  more 
than  one  equipment  piece  is  AWM,  available  technicians 
will  be  assigned  based  on  a  predetermined  priority 
scheme. 

When  maintenance  technicians  are  assigned  to  a  job, 
they  troubleshoot  the  equipment  to  determine  which  LRU 
caused  the  equipment  failure.  After  determining  which 
LRU  is  defective,  the  technicians  get  a  spare  LRU  from 
supply  and  replace  the  defective  unit.  The  equipment  is 
then  returned  to  operation  and  the  broken  LRU  is  placed 
in  AWM  status  until  a  technician  is  available  to  work 
on  it.  If,  however,  there  is  no  spare  LRU  in  supply,  for 
example, if  the  spare  LRU  is  also  broken,  the  technician 
will  remove  the  defective  LRU  from  the  equipment,  repair 
it  in  the  shop,  and  replace  it  in  the  equipment. 

Once  a  defective  LRU  is  placed  in  AWM  status, it  remains 
in  the  broken  spares  queue  until  a  qualified  technician  ^ 
is  idle  and  no  equipment  is  in  the  broken  queue.  At  that 
time  a  technician  is  assigned  to  repair  a  broken  LRU.  The 
priority  for  assigning  repairmen  to  broken  LRUs  is  also 
based  on  a  predetermined  priority  scheme. 

After  a  maintenance  technician  is  assigned  to  repair 
a  broken  LRU  three  things  can  happen:  the  LRU  can  be 
repaired,  parts  can  be  ordered  to  repair  the  LRU,  or  repair 


can  be  interrupted.  If  the  LRU  is  repaired,  it  is  placed 
in  supply  and  the  technicians  are  freed  to  work  on  other 
defective  LRUs.  However,  if  spare  parts  to  repair  the 
LRU  are  not  on  hand,  the  LRU  is  placed  in  awaiting  parts 
(AWP)  status  and  the  parts  are  ordered.  After  the  spare 
parts  arrive  the  LRU  is  placed  in  AWM  status  until  a  tech¬ 
nician  is  available  to  repair  it.  Finally,  if  an  equipment 
fails, repair  of  the  LRU  is  interrupted,  the  LRU  is  returned 
to  AWM  status,  and  the  technicians  are  assigned  to  repair 
the  broken  equipment. 

The  above  paragraphs  describe  the  typical  operation, 
failure,  and  repair  of  electronic  equipment.  However, 
the  description  itself  raises  a  number  of  questions  that 
must  be  addressed  before  the  system  can  be  modeled.  The 
particular  questions  raised  in  the  above  paragraphs  are 
as  follows: 

1.  What  criteria  is  used  to  determine  if  a  repair¬ 
man  is  qualified  to  repair  a  particular  equipment? 

2.  How  is  repair  time  affected  if  an  unqualified 
technician  assists  a  qualified  technician  on  a 
repair  action? 

3.  How  many  technicians  are  required  to  repair  a 
particular  equipment  and  why  is  that  number  required? 

4.  What  mix  of  qualified  and  unqualified  technicians 
will  be  used  on  a  particular  repair  action  and 
why  is  that  mix  used? 
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5.  What  is  the  MTBF  for  each  equipment,  what  is  the 
reliability  distribution  for  each  equipment,  and 
how  were  the  MTBF  and  reliability  distribution 
determined? 

6.  What  is  the  MTTR  for  each  equipment  and  LRU,  what 
probability  distribution  does  the  repair  time 
follow,  and  how  were  these  MTTRs  and  probability 
distribution  determined? 

7.  What  is  the  priority  scheme  for  repairing  equip¬ 
ment  and  LRUs  in  AWM  status  and  how  was  it  deter¬ 
mined? 

8.  What  is  the  probability  that  the  parts  are  not 
available  to  repair  an  LRU  and  how  long  does  it 
take  to  get  the  required  part  once  ordered? 

9.  What  happens  when  there  is  no  spare  LRU  and  the 
parts  needed  to  repair  an  equipment  failure  are 
not  on  hand? 

The  following  paragraphs  address  these  issues. 

In  the  model  developed  for  this  thesis, all  maintenance 
personnel  are  considered  to  be  either  3-level  or  5-level 
technicians.  A  3-level  technician  is  an  apprentice  and 
thus  requires  supervision  on  all  maintenance  activities. 

The  5-level  technician,  on  the  other  hand,  is  fully  qual¬ 
ified  to  repair  all  equipment  assinged  to  his  shop.  Since 
3-level'  technicians  must  be  supervised,  they  are  usually 
assigned  to  assist  5-level  technicians  in  repair  activities 


While  helping  the  5-level  repairmen, the  3-levels  recieve 
training  to  help  them  become  fully  qualified  5-level  tech¬ 
nicians. 

According  to  SMSGT  Nokes,  Superintendent  of  DTVE  Main¬ 
tenance  at  SAC  Headquarters,  when  a  3-level  assists  a  5- 
level  technician  repair  times  increase  by  a  factor  of  one 
and  a  half  to  two.  This  increase  in  repair  time  is  pri¬ 
marily  due  to  the  training  being  provided  during  the  repair 
activity.  Sgt.  Nokes  also  points  out  that  if  an  equipment 
failure  results  in  a  system  failure  the  training  is  elim¬ 
inated  and  the  equipment  is  restored  tb  operation  as  quickly 

'  i 

as  possible. (Ref  14) 

The  number  of  technicians  assigned  to  a  particular 

t 

maintenance  activity  depends  on  three  factors:  the  phys¬ 
ical  size  and  weight  of  the  LRUs,  safety  requirements,  and 
security  requirements.  With  the  proposed  equipment  con¬ 
figuration,  two  technicians  are  required  to  remove  and  re¬ 
place  disk  drives,  television  monitors,  and  ILWSD  projectors 
all  other  LRUs  are  small  enough  and  light  enough  to  be 
lifted  by  one  technician.  Safety  regulations  require  two 
technicians  to  work  on  equipment  when  exposed  to  voltages 
hazardous  to  human  life.  Two  LRUs  fall  into  this  category, 
television  monitors  and  ILWSD  projectors.  Finally,  SAC 
requires  that  two  qualified  persons  be  present  when  main¬ 
tenance  is  performed  on  certain  sensitive  equipment.  Cur¬ 
rently,  none  of  the  equipment  modeled  for  this  thesis  falls 
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into  the  sensitive  category.  However,  since  some  of  the 
equipment,  for  example  the  ADP  terminals,  could  be  recat¬ 
egorized,  this  model  is  capable  of  incorporating  a  simple 
change  to  reflect  the  new  requirement.  Therefore,  the 
model  developed  for  this  thesis  assumes  two  technicians 
are  required  to  repair  disk  drives,  television  monitors 
and  ILWSD  projectors,  while  all  other  equipment  requires 
only  one  technician. 

Current  manning  documents  authorize  approximately 
one  third  of  the  computer  maintenance  technicians  to  be 
3-levels.  However , actual  assignment  data  indicates  that 
the  current  and  projected  level  is  closer  to  one  half. 
Therefore,  the  model  developed  for  this  thesis  assumes  that 
between  one  third  and  one  half  of  each  maintenance  crew 
will  be  3-level  technicians.  Furthermore,  if  two  tech¬ 
nicians  are  assigned  to  a  repair  action  one  of  the  repair¬ 
men  is  assumed  to  be  a  5-level  and  the  other  a  3-level. 

As  prescribed  in  MIL-HDBK-217D , this  thesis  models 
the  reliability  of  the  electronic  equipment  using  the 
exponential  distribution.  The  MTBF  for  each  equipment 
was  computed  using  predicted  values  obtained  from  the  min¬ 
utes  of  a  critical  design  design  revn.e;-:,  vendor  adver¬ 
tisements  , peroidical  articles,  and  conversations  with 
MITRE  Corporation  (Washington  D.C.)  personnel.  The  MTBFs 
used  in  this  thesis  are  contained  in  Table  1  and  a  detailed 
description  of  how  these  MTBFs  were  derived  is  contained 
in  Chapter  V. 


TABLE  I 


MTBF  Estimates  for  the  Upgraded  SAC  Command  Post 


Equipment 

ADP  Work  Station 
Display  Computer 
Command  Post  Computer 
Disk  Drive 

Video  Switch  Power  Supply 
Image  Generator 


Si?  (hours 
or  operation 


3,300 


2,400 

2,800 

10,000 

40,000 

3,000 


Television  Monitor  String 
ILWSD  Projector  String 
Television  Camera 
Microphone 
RF  Modulator 
Television  Monitor 
Category  I  Console  String 
Category  II  Console  String 
Category  III  Console  String 


6,350 

4,700 

40,000 

40,000 

20,000 

10,000 

25,000 

20,000 

15,000 


Kapur  and  Lamberson,  as  well  as  others,  suggest  that 
repair  times  frequently  follow  the  Lognormal  distribution. 
Since  actual  repair  time  data  is  not  available,  and  will 
not  be  available  for  several  years,  the  model  in  this  thesis 
assumes  lognormilly  distributed  repair  times.  In  addition, 
the  model  assumes  that  the  MTTR  for  all  equipment  is  .5  hours 
and  the  MTTR  all  T.pUs  is  8  hours.  Justification  for  using 
these  MTTRs  is  provided  in  Chapter  V. 

Usually  the  operations  and  maintence  organizations 
determine  a  priority  for  repair  of  equipment  failures. 

This  priority  is  usually  based  on  the  impact  of  an  equipment 
failure  on  the  system  availability.  Similarly , maintence 
organizations  frequently  determine  the  priority  of  LRU 
repair  based  on  the  impact  of  not  having  a  spare  LRU  or 
on  the  expected  time  to  repair  an  LRU.  However,  since 
it  is  early  in  the  acquisition  of  the  upgraded  Command 
Post  equipment  repair  priorities  have  not  been  established. 
Furthermore,  Elsayed  has  shown  that  repair  priorities  based 
on  shorter  repair  times  are  not  as  good  repair  priorities 
based  on  the  first-in-first-out  (FIFO)  method  when  cost  is 
used  as  the  criteria  (Ref  3).  Thus  the  model  developed  for 
this  thesis  uses  a  FIFO  priority  scheme  for  all  repair  queue 
When  an  LRU  is  repaired, there  is  a  possibility  that 
the  parts  required  to  complete  the  repair  are  not  on  hand. 
When  this  occurs, the  maintenance  personnel  order  the  parts 
and  place  the  broken  unit  in  AWP  status.  Since  the  bit 
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part  sparing  level  has  not  been  determined, it  is  not  possible 
to  determine  the  percentage  of  LRUs  that  must  be  placed  in 
AWP  status.  The  model  developed  for  this  thesis  , therefore , 
assumes  that  90  percent  of  the  time  the  spare  parts  will  be 
on  hand. 

As  with  the  case  of  LRUs,  parts  may  not  be  on  hand 
to  repair  broken  equipment.  When  this  occurs  parts  are 
ordered  with  a  high  priority.  If  the  required  parts  are 
at  the  base  supply  warehouse, they  will  be  delivered  in  a 
relatively  short  time,  otherwise  the  parts  will  be  back-, 
ordered.  The  model  used  for  this  thesis  assumes  that  the 


required  parts  are  always  on  hand  at  base  supply. 

Q-GERT  Symbols 

Before  the  system  described  above  can  be  represented 
by  a  Q-GERT  network,  it  is  necessary  to  understand  the 
systems  and  terminology  used  in  Q-GERT.  Q-GERT  diagrams 
are  networks  that  consist  of  activities,  servers,  and  queues. 
As  stated  earlier,  Figure  15  contains  the  symbols  for  the. 
nodes  and  activities  used  in  the  model  prepared  for  this 
thesis. 


The  first  node  in  Figure  15  is  a  regular  node.  Reg-  j 
ular  nodes  do  not  hava  a  special  function  other  than  to  I 
receive  and  route  transactions.  Receipt  of  a  transaction  I 
is  called  an  arrival,  and  routing  of  a  transaction  is  called 
a  release.  In  Figure  15,  the  symbol  for  a  regular  node 
contains  the  characters  F,S,  and  #.  F  stands  for  the 


REGULAR  NODE 
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number  of  arrivals  required  to  release  the  node  for  the 
first  time;  Li  stands  for  the  number  of  arrivals  required  to 
release  the  node  for  all  subsequent  times;  and  #  represents 
the  node  number. 

The  second  node  represented  in  Figure  15  is  the 
source  node.  The  distinguishing  difference  between  the 
regular  node  and  the  source  node,  is  the  pointer 
which  symbolizes  that  source  nodes  can  generate  as  well  as 
receive  and  route  transactions.  As  with  regular  nodes ,F 
represents  the  number  of  arrivals  required  for  the  first 
release,  S  represents  the  number  of  arrivals  required  for 
all  subsequent  releases,  and  #  represents  the  node  number. 
The  M  in  the  source  node  symbolizes  that  source  nodes  mark 
each  transaction  with  its  time  of  generation  (mark  time). 
Regular  nodes  can  also  mark  time  if  desired.  Once  a  trans¬ 
action  is  marked, the  mark  time  remains  with  the  transaction 
until  another  node  marks  it  or  until  the  transaction  departs 
the  system. 

The  third  node  is  a  Q-node.  The  Q-node  can  be  distin¬ 
guished  from  all  other  nodes  by  the  hash  mark  (\)  on  the 
right  side  of  the  node,  which  makes  the  node  look  somewhat 
like  the  letter  Q.  Q-nodes  are  nodes  at  which  transactions 
wait  for  service  activities.  As  long  as  at  lease  one  server 
is  idle, each  transaction  arriving  at  the  Q-node  passes 
through  the  node  and  is  routed  through  a  service  activity. 
When  all  servers  associated  with  the  service  activity 
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eminating  from  the  Q-node  are  busy,  the  arriving  trans¬ 
actions  are  placed  in  a  queue  where  they  wait  for  a  server 
to  become  idle.  Transactions  are  ranked  in  the  queue 
based  on  a  predetermined  ordering  scheme.  In  the  model 
developed  for  this  thesis  all  queues  use  a  first-in-first- 
out  (FIFO)  ranking  scheme.  The  Q-node  in  Figure  15  contains 
the  characters:  I,  which  represents  the  initial  number 
of  transactions  in  the  queue;  M,  which  represents  the 
maximum  number  of  transactions  allowed  in  the  queue;  R, 
which  represents  the  ranking  procedure  for  ordering  the 
transactions  in  the  queue;  and  #,  vhich  represents  the  node 
number.  The  symbols  f W\  and  (iT)  are,  respectively,  the 
activity  number  and  the  number  of  parallel  servers  asso¬ 
ciated  with  a  service. 

The  fourth  node  in  Figure  15  is  an  allocate  node. 
Allocate  nodes  must  be  preceeded  by  a  Q-node.  The  allocate 
node  is  used  to  allocate  resources  to  a  transaction.  As 
long  as  resources  are  available,  the  allocate  node  will 
take  the  next  transaction  in  the  preceeding  Q-node,  assign 
a  resource  to  the  transaction,  and  place  the  transaction 
in  the  following  node.  When  resources  are  not  available, 
however,  the  allocate  node  blocks  the  output  of  the  pre¬ 
ceeding  Q-node  and  transactions  are  queued  until  another 
resource  becomes  available.  On  the  symbol  for  the  allocate 
node,QSR  stands  for  the  Q-node  selection  rule  (used  only  if 
more  than  one  Q-node  preceeds  the  allocate  node);  RES  stands 
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for  the  resource  number;  U  represents  the  number  of  re¬ 
sources  to  be  allocated  to  each  transaction;  and  #  rep¬ 
resents  the  node  number.  Allocate  nodes  are  connected  to 
the  preceeding  and  following  nodes  with  dashed  lines  (---►) 
which  signify  the  allocation  of  resources  and  routing  of 
transactions  without  an  associated  activity. 

The  fifth  symbol  in  Figure  15  represents  a  free  node. 
Free  nodes  are  used  to  release  resources  when  they  are  no 
longer  needed.  The  characters  RES,  U,  #,  and  ALLN,  respec¬ 
tively,  stand  for  the  resource  number,  the  number  of  resources 
freed,  the  node  number,  and  the  allocate  nodes  associated 
with  the  freed  resources. 

The  next  symbol  in  Figure  15  represents  attribute 
assignment.  Attributes  are  characteristics  associated 
with  transactions,  and  the  values  assigned  to  attributes 
give  a  transaction  an  identily.  According  to  Pritsker 
attributes  are  used  for  the  following  tnree  reasons:  (Ref  16) 

1.  The  specification  of  the  time  required  for  an 
activity  to  process  the  transaction; 

2.  The  ranking  of  transactions  in  queues;  and 

3.  The  routing  of  transactions  (branching). 

Attributes  can  be  assigned  to  transactions  by  regular  nodes, 
source  nodes,  and  Q-nodes.  In  the  symbol  illustrating 
attribute  assignment,  A  represents  the  attribute  number 
(up  to  eight  attributes  can  be  assigned  to  each  transaction); 

D  represents  the  probability  distribution  from  which  the 
value  of  the  attribute  is  derived;  and  P  represents  the 
parameter  specification  for  the  probability  distribution. 


The  next  four  symbols  in  Figure  15  illustrate  the  four 
types  of  branching  used  in  Q-GERT.  The  first  branching  type, 
deterministic,  routes  a  transaction  along  all  activities 
eminating  from  the  node;  a  maximum  of  50  activities  can  em- 
inate  from  each  node.  The  second  type  of  branching  illus¬ 
trated  is  probabilistic  branching.  With  probabilistic 
branching,  only  one  activity  is  selected  each  time  the  node 
releases;  and  represent  the  probabilities  that  the 
associated  activity  will  be  selected.  With  conditional  take 
first  branching,  the  third  type  of  branching,  Q-GERT  sequen¬ 
tially  tests  conditions  for  selecting  an  activity  and 
routes  the  transaction  on  the  first  activity  to  satisfy 
the  condition.  Conditional  take  all  branching,  on  the  other 
hand,  routes  a  transaction  on  all  activities  that  meet  the 
condition.  and  C2  represent  the  conditions  that  must  be 
met  to  route  a  transaction  on  he  activities. 

The  last  three  symbols  in  Figure  1^  are  arcs.  The 
first  arc  (the  solid  line)  represents  an  activity.  Each 
activity  can  have  an  associated  probability  distribution  (D) 
and  parameter  statement  (PS).  The  probability  distributions 
used  used  in  this  theses  are  exponential,  lognormal,  and 
uniform;  the  parameter  statement?  are  defined  in  chapter 
IV.  Also  associated  with  activities  are  probabilities  (P^), 
conditions  (C1),  activity  numbers  (JjH),  and  number  of 
servers  (^^)  (used  only  with  service  activities). 

The  broken  line  (-•-•-►)  represents  balking.  Balking 
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occurs  when  a  transaction  arrives  at  a  Q-node  that  already 
contains  the  maximum  allowable  number  of  transactions.  If 
balking  is  not  specified  the  transaction  is  lost  to  c’ne 
system.  Howe\er,  if  balking  is  specified  the  transaction 
is  routed  to  another  node  as  indicated  by  the  broken  line. 
Balking  is  not  an  activity,  and  as  such  time  cannot  be 
associated  with  balking. 

Finally.,  the  dashed  line  ( - >)  in  Figure  15  repre¬ 

sents  routing  associated  with  an  allocate  node.  As  stated 
earlier,  the  dashed  lines  are  not  activities  and  cannot  have 
times  associated  with  them.  The  dashed  lines  are  used  by 
Q-GERT  to  indicate  that  the  allocate  node  allocates  a 
resource  to  the  transaction  as  the  transaction  is  routed 
from  the  preceeding  Q-node  to  the  following  node. 

Q-GERT  Network 

In  the  Air  Force,  technicians  are  assigned  to  repair 
electronic  equipment  based  on  their  Air  Force  Specialty 
(AFS).  Three  AFSs  are  required  to  maintain  the  types  of 
equipment  modeled  in  this  thesis:  telephone  maintenence 
technicians,  television  maintenance  technicians,  and  computer 
maintenance  technicians.  Telephone  maintenance  technicians 
repair  the  type  of  equipment  planned  for  the  upgraded  voice 
communications  system;  television  maintenence  technicians 
maintain  the  type  of  equipment  planned  for  the  CCTV  system; 
and  computer  maintenance  technicians  maintain  the  type  of 
equipment  planned  for  the  ADP,  LAN,  and  ILWSD  systems.  To 
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simplify  modeling  and  programming,  the  maintenance  of  the 
equipment  planned  for  the  SAC  Command  Post  upgrade  was 
modeled  using  three  nearly  identical  models,  based  on  the 
AFSs  of  the  technicians  who  maintain  the  equipment.  This 
section  describes  the  Q-GERT  network  used  to  model  the 
maintenance  of  the  ADP,LAN,and  ILWSD  systems  by  computer 
maintenance  technicians. 

Figure  16  (Sheets  1-4)  contains  a  diagram  of  the 
Q-GERT  network  used  to  model  the  maintenance  of  the  ADP, 

LAN,  and  ILWSD  systems.  On  sheet  1,  source  node  1  generates 
44  entities  which  represent  the  equipment  maintained  by  the 
computer  maintenance  technicians.  Entities  1  through  10 
represent  ADP  work  stations,  11  and  12  represent  display 
generator  computers,  13  represents  a  Command  Post  computer, 
14  through  16  represent  disk  drives,  17  and  18  represent 
video  switch  power  supplies,  19  through  24  represent  image 
generators,  25  through  36  represent  television  monitor 
strings,  and  37  through  44  represent  ILWSD  projector  strings 
The  first  43  entities  released  by  node  1  are  routed  back 
to  node  1  to  generate  the  next  entity.  All  entities  released 
by  node  1  are  routed  to  node  2. 

Node  2  is  «  Q-  node  with  capacity  0.  Therefore  each 
entity  arriving  at  node  2  is  placed  directly  into  service 
with  one  of  the  44  servers  associated  with  the  activity 
eminating  from  node  2.  While  the  entities  pass  through 
it,  Q-node  2  assigns  values  to  attributes  2  through  8. 
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Attribute  2  of  each  entity  is  the  MTBF  for  the  equipment  it 
represents;  attribute  3  is  the  MTTR  the  equipment  by  remov¬ 
ing  and  replacing  the  defictive  LRU,  including  the  admin¬ 
istrative  time;  attribute  4  is  the  MTTR  the  defective  LRU; 
attribute  5  is  the  number  of  technicians  required  to  repair 
the  equipment;  attributes  6  and  7  are  the  number  of  5-  and 
3-level  technicians,  respectively,  assigned  to  the  repair; 
and  attribute  8  records  the  time  that  the  equipment  is 
placed  into  operation.  The  values  assigned  to  attributes  2, 
3,4,5,and8  are  determined  by  user  functions  (UFs)  1,2, 3, 4, 
and  6,  respectively  (User  functions  are  user  written  FORTRAN 
functions  used  to  perform  tasks  not  easily  performed  by 
Q-GERT) .  Activity  1,  which  eminates  from  Q-node  2,  has  44 
servers  which  represent  the  equipment  operating  satisfac¬ 
torily,  and  the  time  of  each  service  activity  is  determined 
by  the  value  assigned  to  attribute  2,  the  MTBF. 

The  arrival  of  an  entity  at  node  11  represents  an 
equipment  failure.  Upon  the  arrival  of  an  entity,  node  11 
records  the  time,  simulating  the  notification  of  Job  Con¬ 
trol  and  the  maintenance  shift  supervisor  of  an  equipment 
failure.  After  recording  the  equipment  failure  time  node 
11  determines  if  enough  qualified  technicians  are  available 
to  repair  the  equipment.  If  enough  qualified  technicians 
are  not  available,  user  function  13  will  interrupt  the 
repair  of  a  spare  LRU,  if  an  LRU  is  being  repaired,  to  free 
the  technicians.  User  function  13  will  not,  however, 
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interrupt  the  repair  of  equipment  failure.  Regardless  of 
whether  the  technicians  are  busy  or  available,  node  11 
routes  the  entity  to  Q-node  5. 

Node  5  is  the  broken  equipment  queue.  Entities  arriv¬ 
ing  at  node  5  represent  broken  equipment  waiting  for  tech¬ 
nicians  to  be  allocated  to  the  repair.  If  at  lease  one  unit 
of  resource  1  is  available  node  6  allocates  one  unit  to  the 
entity,  simulating  the  assignment  of  one  5-level  technician 
to  the  repair  task,  and  routes  the  entity  to  node  13.  As 
the  entity  is  routed  to  node  13  the  value  of  attribute  6 
is  set  to  1  to  indicate  that  one  5-level  technician  is 
allocated  to  the  repair  of  this  equipment. 

User  function  14,  called  by  node  13,  checks  to  see 
if  a  3-level  technician  should  be  assigned  to  the  repair 
task.  If  a  3-level  technician  is  idle  or  if  the  task 
requires  two  technicians  the  entity  is  routed  to  node  3, 
otherwise  the  entity  is  routed  to  node  7.  If  the  entity  is 
routed  to  node  3,  the  value  of  attribute  7  is  set  to  1  and 
node  4  allocates  one  unit  of  resource  2  to  the  transaction, 
simulating  the  assignment  of  a  3-level  technician  to  the 
repair  activity.  Node  4  also  routes  the  entity  from  node  3 
to  node  7. 

When  an  entity  arrives  at  node  7,  either  from  node 
13  or  node  3,  through  node  4,  node  7  releases  routing  the 
entity  to  node  20,  on  sheet  2.  Node  20  uses  conditional 
take  first  branching  to  identify  the  which  LRU 
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caused  the  equipment  failure,  simulating  the  troubleshooting 
of  the  equipment.  Two  of  the  equipment  failures  are  not 
caused  by  LRU  failures,  computer  chassis  failure,  and  video 
switch  power  supply  failure.  When  these  failures  occur  node 
20  routes  the  entity  to  node  JO,  on  page  1,  which  simulates 
the  repair  of  an  equipment  without  the  replacement  of  an 
LRU.  On  the  other  hand,  if  the  equipment  failure  is  caused 
by  an  LRU  failure,  node  20  routes  the  entity  on  the  activity 
associated  with  the  LRU.  Arrival  of  the  entity  at  one  of 
the  Q-nodes,  nodes  27  through  45,  represents  the  technician 
going  to  supply  to  get  a  spare  LRU.  If  a  resource  is  avail¬ 
able  the  associated  allocate  node  (nodes  46  through  64)  one 
unit  of  the  resource  is  allocated  and  the  entity  is  sent  to 
node  65,  simulating  the  retrieval  of  of  one  spare  LRU  from 
supply.  However,  if  there  are  no  free  units  of  the  required 
resource,  simulating  that  no  spare  LRU  is  at  supply,  the 
entity  balks  to  node  10  on  page  one  where  repair  of  the 
equipment  withour  replacement  is  simulated. 

When  an  entity  arrives  at  node  10,  either  :from  node  20 
or  by  balking  from  one  of  the  Q-nodes,  user  function  11  com¬ 
putes  the  time  to  repair  the  equipment  and  user  function  9 
records  the  time  that  the  repair  starts.  Node  10  also 
routes  the  entity  to  nodes  8  and  12  with  the  duration  of 
the  activity  determined  by  the  value  of  attribute  3,  sim¬ 
ulating  the  time  required  to  repair  the  equipment.  The 
arrival  of  an  entity  at  node  12  causes  user  function  12  to 
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record  the  time  that  the  equipment  was  repaired  and  results 
in  node  12  routing  the  entity  to  node  2,  which  simulates  the 
equipment  returning  to  service.  When  the  entity  arrives  at 
node  8  it  is  routed  by  conditional  take  all  branching  to 
nodes  17,  18,  and  19  to  free  the  appropriate  number  of 
resources  1  and  2,  the  technicians. 

If,  howeyer,  the  equipment  is  repaired  by  removing  and 
replacing  the  defective  LRU,  the  entity  is  routed  to  node  65 
instead  of  node  10.  Node  65  routes  the  entity  to  node  66 
with  a  service  time  of  the  value  associated  with  attribute  3. 

The  activity  routing  the  entity  from  node  65  to  node  66  rep-  | 

! 

resents  the  time  required  to  remove  and  replace  the  defective  | 
LRU.  Arrival  of  the  entity  at  node  66  simulates  completion 

i 

of  the  equipment  repair.  j 

| 

When  the  entity  arrives  at  node  66  user  function  9 
records  the  time  that  the  LRU  was  removed  from  the  equipment 

I 

and  node  66  routes  the  entity  along  three  activities.  The 
first  activity  goes  to  node  12  which  records  the  time  that 
the  equipment  was  repaired  and  returns  the  equipment  to 
operation.  The  second  activity  goes  to  node  8  which,  as 
described  previously,  frees  the  appropriate  number  of 
resources  1  and  2.  The  third  activity  goes  to  node  67 
which  represents  placing  the  defective  LRU  in  the  broken 
spares  queue. 

Two  things  can  happen  when  an  entity  arrives  at  node 
67.  If  a  unit  of  resource  1  is  available  it  will  be 
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allocated  and  the  entity  routed  to  node  37,  simulating  the 
allocation  of  a  5-level  technician  to  repair  an  LRU.  How¬ 
ever,  if  no  units  are  available  the  entity  is  placed  in  the 
queue  until  a  unit  of  resource  1  is  freed,  simulating  the 
placement  of  the  LRU  in  AWM  ststus.  If  a  unit  of  resource 
2  is  available  when  the  entity  is  routed  to  node  37,  node  56 
will  allocate  one  unit  of  resource  2  and  route  the  entity 
to  node  95;  otherwise  the  entity  will  balk  to  node  95.  In 
either  case  when  the  entity  arrives  at  node  95  it  is  routed 
to  node  14  with  a  service  time  determined  by  attribute  4, 
simulating  the  repair  of  an  LRU. 

As  stated  earlier  in  this  chapter,  three  things 
can  happen  during  the  repair  of  an  LRU: 

1.  The  LRU  is  repaired, 

2.  Parts  are  not  on  hand  and  the  LRU  must  be  placed 
in  AWP  status,  or 

3.  Repair  is  interrupted  to  service  an  equipment 
failure. 

Completion  of  the  LRU  repair  90  percent  of  the  time 
is  simulated  by  the  probabilistic  branching-  from  node  14. 
With  a  probability  of  .9  repair  will  be  completed  and  the 
entity  will  be  routed  to  node  96.  Node  95,  in  turn,  routes 
the  activity  to  node  8  to  free  resources  1  and  2,  and  to 
node  69,  on  sheet  4  which  frees  the  resource  that  represents 
the  LRU.  simulating  the  return  of  the  LRU  to  supply. 

Ordering  a  part  and  placing  the  LRU  in  AWP  status 
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is  reflected  in  the  .1  probabilistic  branch  from  node  14  to 
node  15.  In  this  case, node  15  routes  the  entity  to  node  8 
to  release  the  technicians,  resources  1  and  2,  and  to  node 
67,  the  broken  spare  queue,  with  a  delay  of  24  to  336  hours, 
simulating  the  placement  of  the  LRU  in  AWP  ststus. 

As  stated  earlier,  user  function  13  interrupts  the 
repair  of  an  LRU  if  the  technicians  are  needed  to  repair  an 
equipment  failure.  To  model  the  interruption,  user  function 
13  stops  activity  5,  eminating  from  node  95,  and  routes  the 
entity  to  node  9  without  delay.  When  the  entity  arrives 
node  9  routes  it  to  node  8  to  free  the  technicians,  and  to 
node  67  to  place  the  entity  back  in  the  broken  spares  queue. 

This  chapter  has  described  the  analysis  and  measurement 
phase  of  the  system  science  paradigm  by  developing  and 
presenting  a  parametric  model  of  the  system.  The  a'  ^1 
measurement  approach  is  presented  in  Chapter  V,  the  vali¬ 
dation  and  verification  chapter.  Chapter  IV  continues  the 
presentation  of  the  system  science  paradigm  as  it  applies  to 
the  problem  addressed  in  this  thesis  by  presenting  the 
computerization  of  the  model. 


IV  COMPUTERIZATION 


The  computerization  phase  of  the  system  science  para¬ 
digm  involves  translating  the  parametric  model  into  a  compu¬ 
ter  recognizable  code.  In  this  chapter,  the  computerization 
of  the  parametric  model  developed  in  Chapter  III  is  described 
in  four  sections.  The  first  section  provides  a  description 
of  the  code  used  in  the  user  written  FORTRAN  functions  and 
subroutines.  The  second  section  lists  and  explains  the 
various  Q-GERT  statements  used  in  the  model  and  explains 
the  relationship  between  the  statements  and  the  symbols 
described  in  the  prevoius  chapter.  Section  three  provides 
a  description  of  the  Q-GERT  code  used  in  this  thesis. 

Finally,  the  fourth  section  explains  how  the  Q-GERT  program 
works  with  the  user  functions  and  subroutines  to  process 
transactions. 

FORTRAN  Functions  and  Subroutines 

The  Q-GERT  executive  program  (exec)  makes  calls  to 
user  written  FORTRAN  subroutines  and  functions  under  four 
different  conditions.  User  subroutine  UI  is  called  before 
each  run  of  the  Q-GERT  analysis  program  to  allow  the  modeler 
to  initialize  user  defined  variables  and  to  set  up  initial 
conditions.  User  function  UF  and  user  subroutine  US  are 
called  by  the  Q-GERT  program  to  perform  tasks  not  easily 
performed  by  Q-GERT.  Finally,  user  subroutine  UO  is  called 
at  the  end  of  each  analysis  run  to  perform  special  computations 
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and  to  output  ststistics  not  provided  in  the  Q-GERT  summary 
reports  (Ref  16:235-254).  The  following  subsections  de¬ 
scribe  the  user  written  functions  and  subroutines  used  with 
this  thesis.  The  FORTRAN  code  for  the  subroutines  and 
functions  can  be  found  in  appendix  A  and  the  definition  of 
terms  and  variables  in  Table  II. 

User  Function  UI.  Q-GERT  calls  user  function  UI  at 
the  beginning  of  each  analysis  run.  In  the  model  written 
for  this  thesis  UI  is  used  to  initialize  the  values  of  AVAIL 
and  ATRB8.  AVAIL  is  an  800  by  7  array  used  to  record  (1) 
the  name  or  number  associated  with  each  equipment, (2)  the 
time  the  equipment  started  or  returned  to  operation,  (3) 
the  time  the  equipment  failed, (4)  the  name  or  number  asso¬ 
ciated  with  the  failed  LRU,(5i)  the  time  the  LRU  was  removed 
from  the  equipment,  (6)  the  time  the  LRU  was  repaired,  and 
(7)  the  time  the  equipment  was  returned  to  operation.  UI 
sets  the  values  of  AVAIL(I,1)  to  0  and  all  other  values  of 
AVAIL  to  20000.  ATRB8  is  used  to  count  the  number  of  fail¬ 
ures  and  is  initialized  to  the  value  0. 

The  values  of  parameters  used  for  sampling  from 
the  lognormal  distribution  differ  from  the  parameters  speci¬ 
fied  in  the  Q-GERT  program.  The  values  specified  in  the 
program  are  the  mean  and  standard  deviation  of  the  lognormal 
distribution ,  but  Q-GERT  needs  to  know  the  mean  and  standard 
deviation  of  the  parent  normal  distribution  in  order  to 
generate  data  from  the  lognormal  distribution.  Q-GERT 
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Table  II 


Definition  of  variables  used  in  UI,  UF,  and  UO. 


Variable  Name 

Definition 

ATRB8 

A  real  variable  used  to  count  the 
number  of  failures. 

AVAIL1-AVAIL7 

Real  variables  used  in  sorting  the 
array  AVAIL(I,J)  according  to  failure 
times  stored  in  AVAIL(I,3). 

AVAIL(I,J) 

An  800  by  7  array  used  to  resord  the 
history  of  the  equipment  operation 
and  maintenance. 

DAY1 

A  real  variable  corresponding  to  the 
day  that  an  equipment  starts  operation. 

DAY2 

[  A  real  variable  corresponding  to  the 
time  that  an  equipment  fails. 

DAY3 

A  real  variable  corresponding  to  the 
day  that  an  LRU  is  removed  from  the 
equipment. 

DAY4 

A  real  variable  corresponding  to  the 
day  that  an  LRI  is  repaired. 

DAY5 

A  real  variable  corresponding  to  the 
day  that  an  equipment  returns  to 
operation . 

EQAV(I) 

A  real  variable  corresponding  to  the 
equipment  availability,  and  used  in 
printing  the  equipment  history. 

EQUIP 

A  character  variable  set  to  the  name 
of  an  equipment  when  printing  the 
equipment  history. 

EX(I) 

A  Q-GERT  function  that  returns  a 
sample  from  the  exponential  distri¬ 
bution  with  parameters  specified  by  I. 
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Table  II  (continued) 
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Table  II  (continued) 


Variable  Name 

Definition 

NDAY5 

The  integer  value  of  DAY5. 

NTIM1 

The  integer  value  of  TIM1. 

NTIM2 

The  intager  value  of  TIM2. 

NTIM3 

The  integer  value  of  TIM3. 

NTIM4 

The  integer  value  of  TIM4. 

NTIM5 

The  integej:  value  of  TIM5. 

LRU 

A  character  variable  set  to  the  name 
of  an  LRU  yhen  pronting  the  equip¬ 
ment  history. 

NUM1 

The  integer  value  of  AVAIL(I,1),  used 
in  computing  equipment  availability 
and  determining  the  equipment  name 
when  printing  the  equipment  history. 

NUM4 

I 

The  integer  value  of  AVAIL(I,4) ,used 
when  printing  the  name  of  the  LRU  in 
the  equipment  history. 

NUM8 

The  integer  value  of  ATRB8  or  attri¬ 
bute  8,  used  as  an  index  for  array 
AVAIL(NUM8,I). 

PROB 

A  real  variable  with  a  value  deter¬ 
mined  by  a  sample  from  the  uniform 
distribution  (1,100)  used  to  assign 
an  LRU  to  an  equipment  failure 

STAGO(  A,P,0,AT) 

A  Q-GERT  subroutine  which  stops  ser¬ 
vice  activity  A  and  routes  the  trans¬ 
action  to  node  N  with  delay  D.  0  and 

AT  are  dummy  variables. 

/ 
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Table  II  (continued) 


Variable  Name 


Definition 


TIM1 


A  real  variable  corresponding  to  the 
hour  that  an  equipment  starts 
ooeration . 


TIM2 

TIM3 

TIM4 

TIM5 

TNOW 
UF(IFN) 
UN(  I) 

J"  ilNl 


XMIN2 

XMIN3 

XMIN4 


A  real  variable  corresponding  to  the 
hour  that  an  equipment  fails. 

A  real  variable  corresponding  to  the 
hour  that  an  LRU  is  removed  from  the 
equipment . 

A  real  variable  corresponding  to  the 
time  that  an  LRU  is  repaired. 

A  real  variable  corresponding  to  the 
time  that  an  equipment  returns  to 
service. 

The  current  time. 

User  function  IFN. 

A  sample  from  the  uniform  distri¬ 
bution  defined  by  parameter  set  I. 

A  real  variable  corresponding  to  the 
minute  that  an  equipment  starts 
operation. 

A  real  variable  corresponding  to  the 
minute  that  an  equipment  failed. 

A  real  variable  corresponding  to  the 
minute  that  an  LRU  is  removed  from 
the  equipment. 

A  real  variable  corresponding  to  the 
minute  that  an  LRU  is  repaired. 


MIN5 


A  real  variable  corresponding  to  the 
minute  that  an  equipment  is  returned 
tc  operation. 


automatically  modifies  these  parameters  when  the  sample  is 
taken  by  the  Q-GERT  program,  but  when  a  user  function  is 
used  to  take  the  sample  the  parameters  must  be  modified 
by  the  modeler.  The  call  to  CPLO(N)  statement  in  the 
subroutine  UI  performs  that  modification.  Figure  17  con¬ 
tains  a  flow  diagram  of  user  subroutine  UI. 

User  Functions  UF(IFN).  The  user  function  UF(IFN)  is 
called  by  Q-GERT  whenever  the  function  type  UF  is  prescribed 
in  an  attribute  assignment.  Q-GZRT  can  call  UF  from  both 
activities  and  nodes,  but  in  the  model  used  for  this  thesis 
calls  are  made  only  from  nodes.  In  the  call  statement  the 
value  of  IFN  determines  which  user  function  is  actually  per¬ 
formed  when  UF  is  called.  This  is  accomplished  with  the 
computed  GO  TO  statement 

GO  TO  (1,2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14), IFN. 

The  following  paragraphs  describe  the  user  functions  in  UF. 

Figure  18  contains  a  flow  diagram  of  UF(l).  Based  on 
the  value  of  attribute  1,  UF(1)  assigns  -  value  from  an 
exponential  distribution  to  attribute  2  of  the  transaction 
passing  through  node  2  when  UF(1)  is  called.  The  mean  of 
the  exponential  distribution  is  the  MTBF  for  the  correspond¬ 
ing  equipment.  In  a  similar  manner,  UF(2)  assigns  values 
to  attribute  3  taken  from  the  lognormal  distribution  with  a 
mean  corresponding  to  the  MTTR  of  the  associated  equipment 
(see  Figure  19). 
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Figure  19.  User  Function  UF(2)  Flow  Diagram 


User  function  UF(3)  determines  which  LRU  caused  an 
equipment  failure  by  taking  a  sample  from  a  uniform  (1,100) 
distribution  and  comparing  the  sample  with  the  cumulative 
probability  that  a  particular  LRU  caused  the  failure.  The 
calculations  for  determining  those  cumulative  probabilities 
are  contained  in  Chapter  V.  Figure  20  contains  the  flow 
diagram  for  UF(3). 

User  Function  UF(4)  is  used  to  compute  the  number  of 
repairmen  required  to  repair  an  equipment  failure  by  checking 
the  value  of  attribute  3.  If  the  value  of  attribute  3  is  17 
or  20  the  defective  LRU  is  a  television  monitor  or  an  ILWSD 
projector  and  two  maintenance  technicians  are  required. 
Otherwise  only  one  technician  is  requires.  Figure  21 
contains  a  flow  diagram  of  user  function  UF(4). 

To  compute  the  time  required  to  repair  an  equipment 
failure,  user  function  UF(5)  multiplies  the  usual  repair 
time,  attribute  3,  by  a  sample  from  a  uniform  (1.5,2) 
distribution.  A  flow  diagram  for  user  function  UF(5)  is 
contained  in  Figure  22. 

User  function  UF(6)  is  used  to  record  the  time  an 
equipment  starts  or  returns  to  operation  ,  and  counts  the 
number  of  equipment  failures.  To  record  the  time  that  an 
equipment  returns  to  operation,  user  function  UF(6)  incre- 
ents  ATRB8  and  converts  ATRB8  to  integer  form  to  use  as 
an  index  in  AVAIL(NUM8 , I) .  Then  UF(6)  records  the  equipment 
number  in  AVAIL(NUM8 , 1 )  and  the  start  time  in  AVAIL(NUM8 , 2) . 
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Figure  20  (Sheetl).  User  function  UF(3)  Flow  Diagram 


Figure  21.  User  Function  UF(4)  Flow  Diagram. 


Figure  22.  User  Function  UF(5)  Flow  Diagram. 


Finally,  attribute  8  is  set  to  the  value  in  ATRB8  for  later 
use  in  identifying  the  transaction.  Figure  23  contains 
the  flow  diagram  for  user  function  UF(6).  User  function 
UF(7)  is  unnecessary  and  has  been  deleted  from  the  program. 
To  prevent  a  FORTRAN  compile  error  the  call  statement 
remains  in  the  code,  but  the  function  contains  only  a 
return  statement. 

User  function  UF(8)  records  the  time  of  the  equipment 
failure.  To  record  the  equipment  failure  time  UF(8)  sets 
NUM8  equal  to  the  integer  value  of  attribute  8  to  index 
array  AVAIL(I,J).  Next  UF(8)  stores  the  current  time,  TNOW, 
in  AVAIL(NUM8 , 3) .  Last,  it  returns  the  value  of  attribute  8 
to  satisfy  a  FORTRAN  function  requirement.  A  flow  diagram 
of  user  function  UF(S)  is  contained  in  Figure  24. 

To  record  how  long  a  spare  LRU  remains  broken, user 
function  UF(9)  records  the  time  a  defective  LRU  is  removed 
from  the  equipment  and  user  function  UF(10)  records  the  time 
the  LRU  repair  is  completed.  UF(9)  works  like  UF(6),  re¬ 
cording  the  LRU  type  in  AVAIL(NUM8 ,4)  and  the  removal  time 
in  AVAIL(NUM8 , 5) ;  while  UF(10)  works  like  UF(8)  recording 
the  repaired  time  in  AVAIL( NUM8 , 6 ) .  Figure  25  and  26, 
respectively,  show  flow  diagrams  of  user  functions  UF(9) 
and  UF(10)  . 

User  function  UF(ll)  assigns  the  equipment  repair 
time  to  equipment  if  the  defective  LRU  is  not  available 
for  replacement.  To  accomplish  this  UF(ll)  checks  to  see 
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Figure  24.  User  Function  UF(8)  Flow  Diagram 
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if  attribute  1  equals  10  or  12.  If  so,  attribute  3  is  set 
to  the  value  of  a  sample  taken  from  the  lognormal  distribu¬ 
tion  with  a  mean  of  8  and  a  standard  deviation  of  4.  Other¬ 
wise  attribute  3  remains  unchanged.  Figure  27  contains  a 
flow  diagram  of  user  function  UF(ll). 

User  function  UF(12)  records  the  time  that  the  equip¬ 
ment  returned  to  operation  after  a  failure.  UF(12)  records 
the  time  in  the  same  manner  as  UF(8)  and  UF(10).  Figure  28 
illustrates  the  flow  diagram  for  user  function  UF(12). 

User  function  UF(13)  preempts  repair  of  an  LRU  if 
the  technicians  are  required  to  repair  an  equipment  failure. 
User  function  UF(13)  accomplishes  the  interrupt  by  checking 
to  see  if  the  number  of  technicians  required  for  the  repair 
are  available.  If  there  are  not  enough  free  technicians, 
UF(13)  checks  to  see  if  any  technicians  are  busy  repairing 
broken  LRUs.  If  the  technicians  are  repairing  LRUs,  UF(13) 
calls  STAGO,  a  Q-GERT  subroutine,  to  interrupt  the  LRU 
repair  and  free  the  technicians.  A  flow  diagram  of  user 
function  UF(13)  is  contained  in  Figure  29. 

To  determine  if  a  3-level  should  be  assigned  to  help 
with  the  repair  user  function  UF(14)  makes  two  checks. 

First,  UF(14)  uses  Q-GERT  function  ICSRA(2)  to  determine 
if  any  3-level  technicians  are  available  to  help.  Second, 
UF(14)  checks  to  see  if  one  or  two  technicians  are  required 
for  the  job.  If  the  job  requires  only  one  technician  and 
there  are  no  available  3-levels, attribute  5  is  set  to  0  and 
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Figure  27.  User  Function  UF(li)  Flow  Diagram. 


Figure  28.  User  Function  UF(12)  Flow  Diagram. 


} 
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no  3-level  is  assigned.  Otherwise  attribute  5  remains 
unchanged  and  a  3-  level  is  assigned  to  assist  a  5-level 
technician  on  the  repair.  Figure  contains  a  flow  diagram 
of  user  function  UF(14). 

User  Subroutine  UP.  Q-GERT  calls  user  subroutine  UO 
at  the  end  of  each  simulation  run.  At  that  time  user  sub¬ 
routine  UO  performs  several  tasRs.  First,  UO  initializes 
array  EQAV(I)  to  0  so  that  it  can  be  used  to  help  calculate 
and  store  the  equipment  availabilities.  Next,  UO  sorts 
the  entries  in  array  AVAIL(I,J)  based  on  the  failure  times 
recorded  in  AVAIL(I,3).  Then,  UO  prints  a  heading  for  the 
equipment  history,  it  computes  the  equipment  avail  nullity , 
it  assigns  names  to  the  equipment  numbers  and  LRU  numbers, 
and  prints  the  equipment  history  and  availabilities. 

Figure  31  provides  a  flow  diagram  of  the  user  subroutine 
UO  and  the  FORTRAN  code  for  UO  as  well  as  UI  and  UF  is 
contained  in  appendix  A. 

Q-GERT  Statements 

Table  III  contains  a  list  cf  all  of  the  Q-GERT  state¬ 
ments  used  in  the  model  written  for  this  thesis.  Also 
included  in  the  table  is  a  brief  explaination  of  the  var¬ 
ious  fields  associated  with  each  statement.  A  more  de¬ 
tailed  explaination  of  the  Q-GERT  input  statements  is  con¬ 
tained  in  the  following  paragraphs. 

The  first  input  statement  in  any  Q-GERT  program  is  the 
general  (GEN)  card.  The  GEN  card  is  used  to  define  the 
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Description  of  Q-CUT  Input 
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fiefAult  values  art  given  In  brackets!  1.  If  no  default  value  is  indicated,  date  for  the  field  is  required.  Options  for  a  fialr 
are  given  in  parenthesis  ().  A  slash  (/)  indicates  the  field  nay  contain  two  entries  where  the  slash  and  second  entry  are 
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general  project  information-  Information  contained  on  the 
GEN  card  includes:  the  analyst's  name,  the  project  name, 
the  date,  the  number  of  statistics  nodes  and  sink  nodes 
(not  used  in  this  thesis),  number  of  sink  node  releases  to 
end  the  simulation  (not  used  in  this  thesis),  the  time  to 
end  one  run  of  the  network,  the  number  of  runs  of  the 
network,  the  number  of  output  reports  in  addition  to  the 
summary  report,  the  time  from  which  statistics  are  kept, 
and  the  maximum  number  of  attributes  that  can  be  assigned 
to  any  transaction.  Additional  fields  can  have  values 
assigned,  but  are  not  used  in  this  thesis.  For  additional 
information  see  Pritsker  (Ref  16). 

The  fields  associated  with  the  regular  (REG)  and  source 
(SOU)  nodes  are  the  same.  Field  1  defines  the  node  type,  REG 
or  SOU.  The  second  field  contains  the  node  number  and  an 
optional  node  label  separated  by  a  slash(/).  Fields  three 
and  four  specify  the  number  of  arrivals  needed  to  release 
the  node  for  the  first  time  and  all  subsequent  times,  re¬ 
spectively.  The  fifth  field  specifies  the  type  of  branching 
deterministic  (D),  probabilistic  (P),  conditional  take  first” 
(F),  or  conditional  take  all  (A).  Field  six  is  used  to 
specify  marking,  marking  is  the  default  value  for  source 
nodes  but  not  for  the  regular  nodes.  The  last  field  speci¬ 
fies  the  choice  criterion  for  holding  attributes  (not  used 
in  this  thesis). 

Q-node  input  cards  use  ten  fields.  The  first  field 
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identifies  the  card  as  defining  a  Q-node  (QUE).  Field  two 
identifies  the  node  number  and  node  label  of  the  node  de¬ 
fined  by  the  card.  Fields  three  and  four  identify  the 
initial  number  of  transactions  in  the  queue  and  the  capacity 
of  the  queue.  Branching  criterion  is  defined  by  field  five 
and  ranking  of  transactions  in  the  queue  by  field  six.  Field 
seven  describes  the  balking  or  balking  associated  with  the 
node.  Fields  eight  and  nine  describe  the  limits  of  any 
histogram  to  be  drawn  and  is  not  used  in  this  thesis.  Field 
ten  identifies  any  allocate  nodes  that  follow  the  Q-node. 

The  value  assignment  (VAS)  card  is  used  to  assign 
attributes  to  the  transactions  that  pass  through  the  node 
associated  with  the  VAS  card.  Field  one  identifies  the 
card  as  a  VAS  card.  The  second  field  identifies  the  asso¬ 
ciated  with  the  VAS  card.  Field  three  identifies  the  att¬ 
ribute  number  and  field  four  the  distribution  or  function 
type.  The  fifth  field  identifies  the  parameter  set  defining 
the  parameters  of  the  distribution  identified  in  field  four. 
The  remaining  fields  of  the  VAS  card  are  repeats  of  fields 
3,  4,  and  5. 

To  define  the  parameters  of  a  distribution  a  PAR  card 
is  used.  The  first  field  of  the  card  identifies  it  as  a 
PAR  card  and  the  second  field  identifies  which  parameter 
set  it  defines.  The  third,  fourth,  fifth,  and  sixth  fields 
defines  the  parameters  of  the  associated  distribution.  Since 
the  various  distributions  use  different  parameter  definitions 
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fields  three  through  six  define  different  parameters  for 
the  different  distributions.  Table  IV  defines  the  use  of 
fields  three  through  six  to  define  the  distributions  used 
in  this  thesis.  Finally,  field  seven  prescribes  the  random 
number  stream  to  be  used  in  generating  samples  from  the 
distribution  whose  parameters  are  defines  by  the  PAR  card. 

Activities  are  described  by  an  ACT  card.  The  activity 
card  is  defined  by  the  ACT  in  field  one.  The  second  and 
third  fields  identify  the  starting  and  ending  nodes  of  the 
activity,  respectively.  Field  four  describes  the  distri¬ 
bution  type  and  field  five  the  number  of  the  parameter  set 
for  the  distribution.  The  sixth  field  provides  the  activity 
number  and  label  separated  by  a  slash  (/)  and  the  seventh 
field  the  number  of  parallel  servers.  Field  eight  is  used 
to  describe  the  probability  of  choosing  the  activity  or  the 
attribute  in  which  the  probability  is  stored  if  the  starting 
node  has  probabilistic  branching,  or  the  order  of  testing 
if  the  starting  node  has  conditional  take  first  branching. 
The  last  field  used  is  field  nine  which  provides  the  condi¬ 
tion  code  for  choosing  the  branch  if  the  starting  nose 
specifies  conditional  branching. 

The  resource  node  is  identified  by  the  RES  in  field 
one.  Field  two  contains  the  resource  number  associated  with 
the  resource  being  modeled  and  a  label  for  the  resource, 
while  field  three  specifies  the  number  of  resource  units 
available  when  the  simulation  starts.  The  fourth  through 
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the  thirteenth  fields  are  used  to  specify  the  resource 
allocate  nodes  to  be  polled  when  the  resources  are  freed. 

Allocate  nodes  are  used  to  allocate  the  resources 
defined  by  the  resource  card.  Field  one  defines  the  allocate 
card  by  the  letters  ALL.  The  second  field  on  an  allocate 
card  contains  the  node  number  of  the  allocate  node.  Field 
three  contains  the  rule  used  to  select  the  Q-node  which 
holds  the  transaction  that  the  resource  will  be  allocated 
to.  Field  four  is  the  resource  number  and  field  five  the 
number  of  resources  needed  by  the  waiting  transactions. 

The  sixth  through  sixteenth  fields  list  the  preceeding  Q- 
nodes  in  which  the  transactions  are  waiting  and  the  nodes 
to  which  the  transactions  will  be  routed  after  the  resour¬ 
ces  are  allocated. 

The  free  nodes  free  resources  from  transactions  when 
the  resources  are  no  longer  needed.  The  first  field  of  a 
free  card  identifies  it  as  a  free  (FRE)  card  and  the  second 
field  assigns  the  node  number.  Field  four  identifies  the 
resource  nuber  of  the  resource  to  be  freed  and  field  five 
identifies  the  number  of  units  of  the  resource  -o  be  freed. 
Finally,  fields  six  through  fifteen  identify  the  allocate 
nodes  to  be  polled  when  the  resources  are  freed. 

The  last  node  in  a  Q-GERT  network  must  be  either  a 
begin  or  a  finish  card.  Since  begin  cards  are  not  used  in 
this  thesis  only  the  finish  card  is  described.  The  finish 
card  contains  only  one  field  with  the  letters  FIN. 


Table  IV 


Code  options  for  Q-GERT  Specifications 


Function  and 
Distribution  Types 

* 

Parameter  Values 

Code  Key 

1  2  3  4 

EX  Exponential 

IN  Incremental 

LO  Lognormal 

UF  User  Function 

UN  Uniform 

H  a  b  - 

p  a  b  cr 

-  a  b  - 

J _ 

*  -  ->  not  used;  p  ->  mean;  c r 
standard  deviation;  a  ->  minimum 
or  optimistic  time;  b  -»  maximum 
or  pessimistic  time. 

G-GERT  Code 

The  previous  section  defined  the  Q-GERT  input  state¬ 
ments  used  in  this  thesis.  In  this  section  the  combination 
of  statements  that  form  the  model  developed  for  this  thesis 
is  explained.  In  addition  to  explaining  the  combination 
of  Q-GERT  input  statements  the  reason  for  using  that  par¬ 
ticular  arrangement  of  statements  is  explained.  The  Q-GERT 
code  for  this  thesis  can  be  found  in  appendix  A. 

The  first  card  in  the  Q-GERT  code  is  the  general  (GEN) 
card.  The  word  "DISPLAY”  in  the  third  field  identifies  this 
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Q-GERT  program  as  a  model  of  the  ADP,  LAN,  and  ILWSD  sys¬ 
tems.  The  zeros  in  fields  seven,  eight,  and  nine  state 
that  there  are  no  sink  or  statistics  nodes  in  this  model 
and  that  the  model  is  not  terminated  on  the  release  of  a 
sink  node.  Field  10  indicates  that  the  network  is  to  run 
for  20000  time  units  (hours  in  this  model)  and  field  11 
indicates  that  only  one  run  of  the  network  will  be  acconp- 
lished  each  time  the  Q-GERT  program  is  run.  The  12th 
field  calls  for  an  output  report  to  be  printed  after  the 
first  run  as  well  as  for  a  summary  report,  and  the  13th 
field  indicates  that  the  statistics  will  be  kept  from  the 
time  the  network  starts.  Finally,  the  last  field  states 
that  all  eight  attributes  will  be  used  in  this  simulation 
network. 

The  next  20  input  cards  identify  the  resources  used 
in  this  network.  The  maintenance  crew  size  can  be  adjusted 
by  changing  the  value  of  field  three  on  the  resource  1  or 
resource  2  card.  Similarly  the  spares  level  can  be  adjusted 
by  changing  the  value  of  field  3  on  any  of  the  remaining 
resource  cards . 

The  following  card,  the  SOU  card , identifies  node  1 
as  a  source  node  that  releases  the  first  time  with  no 
arrivals,  and  releases  each  subsequent  time  an  arrival 
occurs.  The  VAS  card  associated  with  node  1  indicates 
that  every  time  the  node  releases  the  value  of  attribute 
1  is  incremented.  Conditional  take  all  branching  is 
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indicated  for  node  1  by  the  "A"  in  the  last  field  of  the 
SOU  card. 

The  next  two  cards  are  activity  cards.  The  first 
of  these  activity  cards  routes  a  transaction  from  node  1 
back  to  itself  whenever  the  value  of  attribute  1  is  less 
than  44.  This  causes  exactly  44  transactions  to  be  gener¬ 
ated.  The  second  activity  routes  the  transaction  from  node 
1  to  node  2. 

Node  2  is  defined  by  the  QUE  card  following  ti  e  ACT  card. 
This  card  indicated  that  the  Q-node  in  labeled  "operate" 
in  the  summary  report,  it  has  no  transactions  queued]  up 
at  the  start  of  the  analysis  run,  and  has  a  capacity'  of 
zero.  In  addition,  the  last  two  fields  indicate  that 
the  node  uses  FIFO  queueing  and  has  deterministic  output. 

As  defined  by  the  next  card,  values  are  assigned  to  'seven 
attributes  at  node  2.  The  values  assigned  to  attributes 

I 

2,  3,  4,  5,  and  8  are  determined  by  user  functions  lj,  2, 

3,  4,  and  6,  and  the  value  zero  is  assigned  to  attributes 
6  and  7.  The  parameters  defining  the  values  assigned  by 
the  user  functions  are  contained  in  the  PAR  cards  immed¬ 
iately  following  the  VAS  card. 

The  ACT  card  that  routes  transactions  from  node  2 
to  node  11  simulates  the  equipment  in  operation.  The 
duration  of  operation  for  each  equipment  is  identified  by 
the  value  of  attribute  2,  the  activity  is  labeled  "OPER-TIME", 
and  the  44  servers  represent  the  equipment  in  operation. 
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The  next  card  identifies  node  11  as  a  regular  (REG) 
node  which  releases  a  transaction  every  time  a  transaction 
arrives.  The  VAS  card  associated  with  node  11  calls  user 
functions  UF  8  and  UF  14,  and  the  ACT  card  that  follows 
routes  the  transaction  from  node  11  to  node  5.  Node  5  is 
defined  by  a  QUE  card  which  assigns  the  label  "GET-SLVL" 
to  the  node  in  the  output  report.  Node  5  is  assigned  an 
initial  value  of  zero  transactions  at  network  start, 
has  a  capacity  of  10  transactions,  uses  FIFO  ordering 
of  transactions  within  the  queue,  and  routes  the  transaction 
through  node  6,  the  following  allocate  node.  The  VAS  card 
associated  with  node  5  assigns  the  value  1.0  to  attribute 
6  as  the  transactions  are  routed  through  the  node. 

The  ALL  card  defines  allocate  node  6.  Since  only 
one  Q-node  preceeds  ALL  node  6,  the  Q-node  selection  rule 
chosen  is  priority  based  on  the  order  listed  in  the  last 
field  on  the  card  (POR).  Fields  four  and  five  identify 
this  node  as  allocating  one  unit  of  resource  1  to  each 
transaction  that  passes  through  the  node,  and  field  six 
indicates  that  the  transaction  is  routed  from  node  5  to 
node  11. 

Immediately  following  the  ALL  card  is  a  REG  card  that 
defines  node  13.  Fields  three  and  four  of  node  13  indicate 
that  it  releases  every  time  an  entity  arrives.  The  VAS 
card  assiciated  with  node  11  is  used  to  call  user  function 
UF(13)  which  places  a  value  in  attribute  5  that  determines 
which  activity  the  transaction  will  be  routed  down  by  the 
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conditional  take  first  branching  defined  by  the  "F"  in  the 
last  field  on  the  dard.  The  first  of  the  two  ACT  cards 
defines  the  condition  for  the  transaction  to  take  the  ac¬ 
tivity  to  node  3  (attribute  5  greater  than  zero),  while  the 
second  hCT  card  defines  the  condition  for  routing  the  activ¬ 
ity  to  node  7  (attribute  5  equal  zero). 

The  next  card  in  the  program  is  a  QUE  card  which  has 

v 

an  initial  quantity  of  transactions  equal  to  zero  and  is 
capable  of  holding  a  maximum  of  one  transaction  in  the  queue. 
This  card  identifies  Q-node  3  and  labels  it  "GET-3LVL. " 

The  VAS  card  associated  with  Q-node  3  assigns  the  value  1 
to  attribute  7  as  the  transaction  is  routed  through  the  node. 
The  last  field  on  the  QUE  card  identifies  node  4  as  the  fol¬ 
lowing  allocate  node.  The  ALL  card  assigns  one  unit  of 
resource  2  to  each  transaction  that  it  routes  from  node 
3  to  node  7.  Node  7  is  defined  by  the  REG  card  as  a  regular 
node  that  releases  every  time  it  gets  an  arrival.  The  ACT 
card  that  follows  routes  the  transaction  from  node  7  to  node 
20. 

Node  20  is  also  defined  by  a  REG  card.  It  also  re¬ 
leases  once  for  every  arrival  it  gets.  However,  node  20 
has  conditional  take  first  branching,  as  defined  by  the  "F" 
in  the  last  field  of  the  card.  Eighteen  activities  eminate 
from  node  20,  as  illustrated  by  the  18  ACT  cards  that  follow 
the  REG  card.  Each  activity  card  has  a  condition  for  taking 
the  activity  and  the  condition  corresponds  to  the  value  in 
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attribute  4  of  the  transaction  passing  through  the  node. 

Each  of  the  18  activities  terminates  at  a  Q-node.  The 
Q-nodes  are  used  to  store  transactions  that  must  await  re¬ 
sources  and  each  Q-node  is  followed  by  an  allocate  node. 

The  allocate  nodes  are  specified  by  ALL  cards  that  follow 
immediately  after  the  associated  QUE  cards.  Each  allocate 
card  allocates  one  unit  of  the  appropriate  resource  to  each 
transaction  that  is  routed  through  the  node.  Ail  18  allocate 
cards  route  the  transactions  that  pass  through  them  to  node 
65. 

Node  65  is  defined  by  a  QUE  card.  It  initially  has 
no  transactions  queued  and  has  a  maximum  capacity  of  10 
transactions.  Ranking  within  the  queue  is  FIFO  and  branching 
from  the  node  is  dewernimistic.  The  ACT  card  that  follows 
defines  the  activity  from  ncde  65  to  node  66.  The  time  it 
takes  to  get  from  node  65  to  node  66  is  defined  by  attribute 
3. 

A  REG  card  defines  node  66  which  releases  a  trans¬ 
action  every  time  one  arrives.  The  VAS  card  associated 
with  node  66  calls  user  Function  UF(9).  The  three  act¬ 
ivities  eminating  from  node  66  are  defined  by  the  next 
three  ACT  cards.  The  first  of  the  cards  routes  the  trans¬ 
actions  to  node  12,  the  second  routes  transactions  to  node 
8  and  the  third  routes  transactions  to  node  67. 

Node  67,  defined  by  a  QUE  card,  has  an  no  transactions 
initially  in  the  queue  and  has  a  capacity  of  10  transactions. 
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The  VAS  card  associated  with  node  67  assigns  the  value  1.0 
to  attribute  6  and  the  .alue  0.0  to  attribute  7.  The  last 
field  of  the  QUE  card  indicates  that  node  67  routes  all 
transactions  through  locate  node  97.  The  allocate  node  is 
defined  by  the  ALL  card  to  allocate  one  unit  of  resource  1 
to  each  transaction  that  it  routes  form  node  67  to  node  37. 

Node  37  is  a  Q-node  which  the  QUE  card  defines  to  have 
no  capacity  in  the  .jueue.  All  transactions  that  arrive  at 
node  37  when  the  following  allocate  node  has  no  available 
resources  balks  to  node  95,  as  indicated  by  the  95  in  field 
seven  of  the  QUE  card.  The  allocate  node  associated  with 
node  37  is  node  56.  Node  56  allocates  one  unit  of  resource 
2  to  each  transaction  that  it  routes  from  node  37  to  node  95. 

Node  95  is  defined  by  a  QUE  card  to  have  no  initial 
transactions  in  the  queue  and  to  have  a  capacity  of  10.  The 
VAS  card  associated  with  node  95  assigns  a  value  from  the 
lognormal  distribution  to  attribute  3  of  the  current  trans¬ 
action.  The  activity  from  node  95  to  node  14  is  defined 
by  the  next  ACT  card.  Fields  four  and  five  of  the  ACT  card 
indicate  that  the  duration  of  the  activity  is  determined  by 
the  value  of  attribute  3  which  was  assigned  in  node  95. 

The  sixth  and  seventh  fields  label  the  activity  as  "BENCH- 
CK"  and  indicate  that  there  are  10  parallel  servers. 

The  REG  card  that  follows  identifies  node  14  which 
releases  a  transaction  every  time  it  has  an  arrival.  The 
last  field  on  the  cars  indicates  that  probabilistic  branching 


is  used  in  node  14.  The  next  two  cards  are  ACT  cards  that 
define  the  probabilistic  branching  from  node  14.  The  first 
activity  has  a  90  percent  probability  of  being  chosen  and 
routes  transactions  to  node  96.  The  second  activity  has  a 
10  percent  chance  of  being  chosen  and  routes  transactions  to 
node  15. 

Node  15  is  defined  by  a  REG  card,  it  has  deterministic 
branching.  The  first  branch  from  node  13  routes  transactions 
to  node  8  and  the  second  routes  transactions  to  node  67 
with  a  duration  defined  by  the  uniform  distribution  with 
parameter  set  20.  Node  96  is  also  defined  by  a  REG  card 
and  also  has  deterministic  branching.  Two  activities  also 
eminate  from  node  96.  The  first  activity  is  routed  to  node 
8  and  the  second  to  node  69.  Both  activities  have  a  duration 
of  zero. 

Node  69  is  a  regular  node  with  conditional  take  first 
branching.  The  VAS  card  associated  with  node  69  calls 
user  function  10.  The  twenty  activities  eminating  from 
node  69  are  defined  by  the  next  20  ACT  cards.  Each  ACT 
card  defines  the  condition  that  must  be  met  by  attribute  4 
to  be  selected.  The  activities  route  transactions  to  free 
node  .76  through  94.  Nodes  76  through  94  are  defined  by  FRE 
cards  and  free  one  unit  of  the  associated  resource  each 
time  a  transaction  arrives.  The  last  field  of  each  FRE 
card  lists  the  allocate  nodes  that  the  resources  will  poll 
after  being  freed. 
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The  next  node  discussed  is  nods  9,  defined  by  a  REG 
card.  Transactions  are  routed  to  node  9  by  a  Q-GERT  user 
function  that  interrupts  service  activity  number  5.  When 
a  transaction  arrives  at  node  9,  transactions  are  routed  on 
two  activities.  The  first  activity  routes  a  transaction 
to  node  67  and  the  second  activity  routes  a  transaction  to 
node  8.  Arrival  of  an  activity  at  node  8  causes  the  node 
to  route  transactions  on  one  or  more  of  the  three  activ¬ 
ities  eminating  from  the  node.  The  branching  used  is  con¬ 
ditional  take  all.  The  activities  eminating  from  node  8 
compare  the  value  of  attribute  6  cr  7,  depending  on  the 
activity,  to  specified  values.  If  the  values  are  the  same 
the  activity  is  selected.  The  activities  route  the  transac¬ 
tions  to  free  nodes  17,18  and  19  where  the  appropriate 
number  of  units  of  resources  1  and  2  are  freed  to  the  cor¬ 
responding  allocate  nodes. 

Routing  of  activities  to  node  10  was  discussed  earlier 
in  this  section.  For  each  transaction  that  arrives  at  node 
10  the  node  releases.  The  VAS  card  associated  with  node  10 
calls  user  functions  UF(ll)  and  UF(9).  The  activities  emin¬ 
ating  from  iode  10  routes  transactions  to  node  12  with  a 
duration  determined  by  the  value  of  attribute  3  and  to  node 
8  with  the  same  duration.  Node  12  is  defined  by  a  REG  card 
and  the  VAS  card  associated  with  node  12  calls  user  function 
UF(12).  The  activity  eminating  from  node  12  routes  transac¬ 
tions  back  to  node  2  at  the  beginning  of  the  network. 
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Figure  31  contains  a  diagram  of  the  Q-GERT  network 
with  the  Q-GERT  code  inserted  near  the  corresponding  nodes 
and  activities.  With  Figure  31  it  becomes  easier  to 
visualize  and  relate  the  Q-GERT  network  with  the  correspond¬ 
ing  code  in  the  program.  This  section  discussed  the  rela¬ 
tionship  between  the  Q-GERT  code  and  the  user  functions 
using  figure  31  to  help  explain  the  reasons  for  using  the 
FORTRAN  functions. 

As  transactions  are  generated  in  source  node  1  the 
value  of  attribute  1  is  incremented  for  two  reasons. 

First,  attribute  1  is  used  as  a  comparison  value  for  the 
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conditional  branching  that  generates  more  transactions. 

Second,  each  transaction,  or  entity,  generated  by  node  1 

i 

represents  an  equipment  and  the  number  in  attribute  1  iden- 

I 

tifies  the  particular  equipment  the  transaction  represents 

|  • 

Q-node  2  assigrts  values  to  the  other  seven  attributes 

. 

associated  with  the  transactions  generated  in  this  program. 
The  value  assigned  to  attribute  2  is  determined  by  user 
function  UF(1)  and  represents  the  MTBF  for  the  equipment 
represented  by  the  entity.  User  function  UF(2)  generates 
the  MTTR  the  equipment  which  is  stored  in  attribute  2  and 
user  function  UF(3)  generates  the  value  for  the  MTTR  for 
LRUs  assigned  to  attribute  4.  The  value  of  attribute  5 
is  calculated  in  user  function  UF(4)  and  is  determined  by 
the  value  in  attribute  1.  Attributes  6  and  7  are  constants 
assigned  by  the  VAS  card,  and  attribute  8  is  determined  by 
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Figure  ji  (Sheet  1).  Q-GERT  Diagram  of  Maintenance  on  the 
Upgraded  SAC  Command  Post. 
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Figure  31  (Sheet  3).  Q-GERT  Diagram  (Continued) 


Figure  31  (Sheet  4).  Q-GERT  Diagram  (Continued). 
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assigned  by  the  VAS  card,  and  attribute  8  is  determined  by 
user  function  UF(6).  UF(6)  assigns  a  value  to  attribute 

8  that  corresponds  to  the  order  that  the  equipment  either 
initially  started  operation  or  returned  to  operation  and 
is  used  to  order  the  data  to  be  printed  in  the  equipment 
history.  UF(6)  also  records  the  equipment  start  time. 

The  next  node,  node  11  uses  two  user  functions.  The 
first  user  function,  UF(8)  records  the  time  that  the  equip¬ 
ment  failed,  and  the  second  user  function,  UF(13),  interrupts 
the  service  of  any  LRUs,  if  necessary,  to  free  repairmen  to 
fix  broken  equipment.  Q-node  5  used  a  constant  distribution 
to  assign  the  value  1.0  to  all  transactions  passing  through 
it.  User  function  14  is  called  from  node  13  to  determine 
if  a  3-level  should  be  assigned  to  the  repair  activity.  If 
a  3-level  should  be  assigned,  attribute  5  is  not  changed  by 
UF(14),  but  if  a  3-level  should  not  be  assigned,  attribute 
5  is  set  to  zero.  If  the  transaction  is  routad  through 
node  3,  attribute  7  is  set  to  1  to  indicate  that  a  3-level 
is  assigned  to  the  task. 

User  functions  are  not  called  from  the  nodes  listed  on 
sheet  2  of  the  Q-GERT  diagrams,  but  several  user  fun¬ 
ctions  are  called  from  the  nodes  drawn  on  sheet  3.  Node  66 
calls  user  function  UF(9)  to  record  the  time  that  the  LRU 
was  removed  from  the  equipment.  In  addition  UF(9)  records 
the  number  associated  with  the  failed  LRU.  Nodes  67  and  37 
use  constant  distributions  to  assign  values  corresponding  to 
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the  number  of  3-  level  and  5-  level  technicians  assigned  to 
the  repair. 

Node  69  on  sheet  4  calls  user  function  UF(10)  to  re¬ 
cord  the  time  that  the  repair  of  the  LRU  is  completed.  Back 
on  sheet  1  three  more  user  functions  are  called.  Node  10 
calls  user  functions  UF(ll)  and  UF(9).  UF(ll)  is  used  to 
compute  the  time  it  takes  to  repair  an  equipment  if  the 
spare  LRU  is  also  broken,  and  UF(9)  records  the  time  that 
the  repair  of  the  equipment  is  started.  The  only  user 
function  luft  is  UF(12)  which  is  called  by  node  12.  UF(12) 

is  used  to  record  the  time  that  a  system  is  returned  to 
operation. 

This  chapter  has  explained  the  computerization  of 
the  parametric  model  developed  in  Chapter  III.  The  next 
chapter  will  provide  a  validation  and  verification  of  the 
parametric  and  the  computer  models. 


VALIDATION  AND  VERIFICATION 
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Fishman  and  Kiviat  (Ref  6  )  divide  the  evaluation  of 
simulation  projects  into  three  categories:  verification, 
validation,  and  problem  analysis.  Verification  involves 
testing  to  insure  that  the  model  behaves  the  way  the  modeler 
intends;  validation  involves  testing  to  see  that  the  model 
is  in  agreement  with  the  real  system;  and  problem  analysis 
involves  drawing  statistically  significant  inferences  from 
the  data  generated  by  the  simulation.  This  chapter  examines 
the  first  twc  categories  and  Chapter  VI  presents  the  third 
category. 

Validation 

As  stated  in  the  previous  paragraph,  validation  is 
testing  to  assure  that  the  model  is  in  agreement  with  the 
real  system.  Since  the  system  being  modeled  for  this  thesis 
does  not  yet  exist,  testing  for  agreement  between  the  model 
and  the  system  is  impossible.  However,  many  tests  can  be 
performed  to  assure  that  the  model  does  in  fact  provide 
information  that  would  be  consistant  with  the  real  system 
if  it  existed.  For  example,  the  availability  data  generated 
by  this  model  could  be  compared  with  analytical  availability 
data  computed  from  the  reliability  and  maintainability  esti¬ 
mates  used  for  this  thesis  or  a  history  of  the  equipment 
operation  and  failures  could  be  printed  to  determine  if  the 
model  produced  a  realistic  scenario  of  operation,  failure, 


and  repair  of  the  equipment.  The  following  subsections 
address  the  various  methods  used  in  this  thesis  to  validate 
the  model. 

Availability.  In  Chapter  II  three  questions  were 
raised  about  the  definition  of  reliability,  which  in  turn 
affects  the  equipment  availability.  The  questions  concerned 
the  determination  of  the  operating  environment,  the  deter¬ 
mination  of  adequate  performance  and  the  probabilistic  no¬ 
tion  of  equipment  failure.  The  following  paragraphs  address 
these  issues. 

All  of  the  equipment  planned  for  the  SAC  Command  Post 
upgrade  is  designed  to  operate  in  an  air  conditioned  environ¬ 
ment  with  controlled  humidity.  The  environment  at  SAC  Head¬ 
quarters  where  the  equipment  will  be  operating  meets  these 
environmental  criteria.  Therefore,  the  predicted  equipment 
reliabilities  are  appropriate  for  use  in  this  thesis. 

System  performance  is  usually  defined  by  operations 

personnel  and  is  usually  defined  in  three  levels: 
satisfactory  operation,  impaired  operation,  and  not  opera¬ 
tional.  The  determining  factor  on  the  adequate  performance 
of  the  system  is  the  amount  of  information  that  the  system 
can  provide  to  the  users  at  any  point  in  time.  For  sim¬ 
plicity,  this  thesis  assumes  two  levels  of  operational 
availability,  operational  and  not  operational.  The  systems 
in  this  thesis  are  assumed  to  be  operational  if  data  can 
be  provided  to  the  users  through  half  of  the  input  and  output' 


devices  associated  with  the  system.  Therefore  the  ILWSD 
system  is  considered  operational  as  long  as  one  of  the  disk 
drives,  one  of  the  display  computers,  three  of  the  image 
generators,  one  of  the  video  switch  power  supplies  and  four 
of  the  projectors  are  operational.  The  television  monitors 
in  the  ILWSD  system  are  convenience  devices  and  for  this 
thesis  are  not  considered  necessary  for  system  operation. 
Similarly,  the  ADP  system  is  considered  operational  as 
long  as  the  command  post  computer  and  at  least  five  ADP 
work  stations  are  operational,  and  the  CCTV  system  is 
considered  operational  as  long  as  the  RF  modulator,  six 
briefer  stations,  and  ten  television  monitors  are  operating 
satisfactorily.  The  upgraded  voice  communications,  on  the 
other  hand,  consists  of  54  individual  units,  and  failure  of 
half  of  any  category  of  equipment  would  be  considered  a 
system  failure  for  this  thesis. 

The  probabilistic  notion  of  equipment  failure  deals 
with  the  probability  distribution  and  mean  time  between 
failure  of  the  equipment  being  modeled.  The  exponential 
distribution  was  chosen  to  model  the  equipment  reliability 
for  several  reasons.  First,  the  exponential  distribution 
has  been  shown  to' closely  resemble  the  actual  reliability  of 
electronic  equipment.  In  fact,  the  resemblence  is  sc  close 
that  MIL-HBBK-217Bi  prescribes  the  use  of  the  exponential 
distribution  when  modeling  the  reliability  of  electronic 
equipment.  Another  reason  for  using  the  exponential 
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distribution  is  that  'the  reliability  data  gathered  for  this 
thesis  estimated  equipment  reliability  using  the  exponential 
distribution.  The  final  reason  for  using  the  exponential 
distribution  is  the  memoryless  property,  which  simplifies 
the  FORTRAN  programming  and  equipment  reliability  calcula¬ 
tions  . 

The  mean  time  between  failures  for  the  equipment  was 
based  on  data  obtained  from  several  sources.  The  MTBFs  for 
the  display  computer,  command  post  computer,  image  generator 
and  video  switches  were  obtained  from  the  minutes  of  a  criti¬ 
cal  design  review  for  the  Digital  Television  Element  Backup, 
a  system  similar  to  the  ILU3D  system  (Ref  13).  Similarly, 
the  MTBFs  for  the  television  monitor,  disk  drives,  power 
supplies,  and  printers  were  obtained  from  articles  and  ad¬ 
vertisements  in  trade  magazines,  and  from  vendor  brochures. 
Finally,  the  MTBFs  for  the  remaining  equipment  were  estimated 
using  information  provided  in  telephone  conversations  with 
personnel  working  for  MITRE  Corporation  (Washington  D,C.) 
(Ref  20). 

Table  V  contains  a  list  of  the  reliability  figures 
used  to  calculate  the  equipment  reliabilities  used  in  this 
thesis,  and  the  source  for  the  reliability  figures.  To 
calculate  the  equipment  reliability  the  following 
formulas  are  used; 

R ( t )  =  e"(t/9)  (4) 
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Hi(t)‘**Rn(t)  -  exp[-(t/91)]‘**exp[-(t/9n)] 

*  exp[-t(l/9^+  •••  +  1/ ©n ) ]  (5) 

Setting  1/9  equal  to  ^produces  the  following  equation: 


R, ( t) • • *R  (t)  -  exp[-t(^  +  ...  )]  (6) 

In  i  n 

In  equations  4,  5,  and  6,  9  represents  the  MTBF  t 
represents  time  and  represents  the  failure  rate.  The 
equipment  MTBFs  were  calculated  using  equation  6  and  the 
failure  rates  provided  in  Table  V.  The  failure  rates 
for  the  upgraded  voice  communications  system  were  omitted 
from  the  table  because  reliability  estimates  for  the  equip¬ 
ment  could  not  be  obtained,  therefore  conservative  estimates 
were  made. 

The  system  availability  for  the  ILWoO  system  can 
be  calculated  using  the  following  formula:  (Ref  9) 


As  -  [1-(1-A1)2][1-(1-A2)2][1-(1-A3)2] 

X 


(7) 

8-x 


Where  A^is  the  availability  of  the  display  computer,  is 
the  availability  of  the  disk  drive,  A^  is  the  availability 
of  the  video  switch  power  supply,  A^is  the  availability  of 
an  image  generator,  and  A^  is  the  availability  of  a  pro¬ 
jector.  Similar  formulas  can  be  used  to  obtain  the  pre¬ 
dicted  availabilities  for  the  other  systems.  Using  the 
formulas,  the  following  availabilities  were  predicted: 
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ILWSD  system,  .99999965;  ADP  system,  .9997982;  CCTV  system, 
.9997;  and  upgraded  voice  communications.,  .99989975.  These 
availabilities  were  predicted  using  the  estimated  mean  time 
between  failures  and  a  mean  time  to  repair  of  .5  hours. 

Since  the  system  availability  predictions  are  so  high 
it  is  very  possible  that  a  system  failure  would  not  occur 
during  a  reasonable  length  simulation  run.  Therefore,  one 
measure  of  the  reasonableness  of  the  model  could  be  the 
number  of  times  a  system  failure  occurs.  Another  measure¬ 
ment  could  be  to  compare  the  equipment  availabilities  gene¬ 
rated  by  the  simulation  program  with  the  availabilities 
predicted  using  analytical  techniques. 

History  Report.  Another  approach  to  validating  the 
computer  model  of  the  SAC  Command  Post  upgrade  equipment  is 
to  print  a  history  of  equipment  failures  and  examine  it  to 
see  if  it  reasonably  approximates  reality.  Several  things 
could  be  examined  in  the  history,  for  instance,  if  the  MTBF 
were  cut  in  half  it  is  reasonable  to  expect  the  number  of 
failures  to  double  if  nothing  else  is  changed.  Similarly, 
if  the  MTTR  LRU,  is  doubled  it  is  reasonable  to  expect  the 
average  number  of  spares  available  to  drop. 

Conclusions  on  Validity.  The  model  developed  for  this 
thesis  does  adequately  represent  the  systems  described  in 
Chapter  II.  In  24  runs  of  the  simulation  program,  a  failure 
of  the  ILWSD  system  occurred  only  once  and  the  availabilities 
of  the  equipment  closely  corresponded  to  the  availabilities 


117 


computed  analytically  under  the  same  conditions.  Furthermore 
the  printed  history  of  equipment  operation , failure  and  re¬ 
pair  bore  a  strong  resemblence  to  equipment  operation , fail¬ 
ure  and  repair  of  real  equipment.  A  sample  history  is 
included  in  appendix  C. 

Verification 

As  stated  earlier  in  this  chapter,  verification  is 
insuring  that  the  model  performs  the  way  the  modeler  intends. 
A  number  of  tests  were  accomplished  it  verify  the  model 
developed  for  this  thesis.  During  the  development  of  the 
Q-GERT  code,  traces  were  printed  out  after  each  run  of  the 
network.  A  trace  is  an  option  available  in  Q-GERT  which 
allows  the  modeler  to  observe  a  printed  record  of  the  arri¬ 
vals  of  transactions  at  nodes  and  the  release  of  transactions 
from  nodes.  With  a  nodal  trace  the  modeler  can  actually 
follow  the  simulation  run  through  the  network  to  see  that  it 
performs  as  intended. 

To  verify  the  FORTRAN  code,  each  subroutine  and  func¬ 
tion  was  developed  separately  and  tested  before  and  after  it 
was  included  in  the  Q-GERT  program.  After  the  FORTRAN  code 
was  installed  in  the  Q-GERT  program,  calls  were  made  to  see 
that  the  functions  operated  as  expected  with  the  other  code 
and  to  see  that  if  calls  to  more  than  one  user  function  were 
made  from  the  same  node  that  the  calls  were  in  the  proper 
order. 
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Experimental  Design 

As  stated  in  Chapter  I  the  purpose  of  this  thesis  is 
to  develop,  test  and  validate  a  model  which  can  be  used  to 
determine  the  number  and  skill  level  mix  of  Air  Force  main¬ 
tenance  personnel  required  to  maintain  the  equipment  systems 
proposed  for  the  upgraded  SAC  Command  Post.  Other  objectives 
include  testing  the  sensitivity  of  the  maintenance  crew  size 
to  variances  in  MTBF,  MTTR ,  system  size,  and  system  avail¬ 
ability;  and  test  the  sensitivity  of  system  availability  to 
variances  in  MTBF,  MTTR,  system  size,  spares  level,  and  crew 
size.  To  accomplish  these  a  2^  factorial  experiment  was  set 
up . 

A  2?  factorial  design  consists  of  five  factors  of  in¬ 
terest  each  factor  set  at  two  levels.  The  factors  consid¬ 
ered  for  this  experiment  are:  crew  size  and  skill  level 
mix,  spares  level,  mean  time  between  failure,  mean  time  to 
repair  the  system  and  mean  time  to  repair  the  LRUs.  To  de¬ 
termine  what  levels  to  run  for  each  factor  two  approaches 
were  taken.  For  the  crew  size  and  skill  level  mix,  and  the 
spares  level  test  runs  of  were  made  on  the  network  with  the 
resources  level  for  both  factors  set  to  10.  The  results  of 
these  runs  indicated  that  the  required  level  of  maintenance 
personnel  is  either  two  or  three,  and  the  required  level  of 
spares  is  either  one  or  two.  Since  one  third  to  one  half  of 
each  maintenance  crew  would  be  3-level  technicians  it  was 
decided  to  run  the  experiment  with  one  5-level  and  one  3- 
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level  technician  as  the  low  level,  and  two  5-level  and  one 
3-level  technicians  as  the  high  level  for  the  maintenance 
crew  factor.  From  fhe  test  runs  it  was  also  determined  that 
the  low  level  for  spares  should  be  one  and  the  high  level 
should  be  two. 

The  levels  for  the  other  factors  were  determined  in 
another  manner.  The  MTBFs  for  the  various  equipment  were 
determined  from  the  sources  listed  in  Table  V  and  these 
MTBFs  were  used  as  the  high  levels  for  the  experiment.  To 
select  a  value  for  the  low  level  the  MTBFs  were  divided  by 
two.  Similarly  the  equipment  MTTRs  were  derived  from  the 
data  provided  in  Table  V.  From  this  data  it  was  decided  to 
use  the  value  .5  hours  for  the  high  level  and  the  value  2.0 
for  the  low  level.  Data  was  not  available  to  help  determine 
the  MTTR  LRUs,  therefore  estimates  of  repair  time  were  made 
of  how  long  it  would  take  to  repair  LRUs  with  and  without 
automated  test  equipment.  These  estimates  are  4  hours  with 
automated  test  equipment  and  16  hours  without  it.  Therefore 
4  hours  was  chosen  to  be  the  high  level  and  16  hours  was 
chosen  to  be  the  low  level.  As  can  be  seen  by  examining  the 
choices  for  the  high  and  low  levels,  the  values  chosen  for 
high  levels  are  those  levels  that  would  tend  to  produce  a 
higher  availibility  and  those  chosen  for  the  low  level  would 
tend  to  produce  a  lower  avaiJ ability . 

To  provide  a  reasonable  estimate  of  the  error  associated 

120 


\  / 


with  the  observations,  multiple  runs  of  the  network  were  made. 
In  this  case  three  runs  were  made  for  each  factor  level  where 
observations  were  taken.  Making  three  observations  per  factor 
level  allows  one  degree  of  freedom  to  be  used  in  estimating 
the  value  of  the  contrasts  associated  with  each  main  effect 
and  the  interactions,  and  two  degrees  of  freedom  per  cell  to 
estimate  error. 

Finally,  the  duration  of  the  simulation  was  determined. 

To  determine  the  run  time  for  the  simulation  program,  the  model 
was  run  at  four  times,  5000,  10000,  20000,  and  40000  hours. 

At  5000  hours  over  one  third  of  the  equipment  modeled  did  not 
experience  failure,  and  at  10000  hours  nearly  20  percent  of 
the  equipment  did  not  experience  failures.  However,  at  20000 
and  40000  hours  over  95  precent  of  the  equipment  failed,  in¬ 
dicating  that  20000  hours  was  a  sufficient  duration  for  the 
simulation . 

Variance  Reduction.  Variance  reduction  techniques  are 
used  to  reduce  the  total  number  of  runs  of  the  simulation 
network  in  order  to  get  meaningful  results.  For  this  thesis, 
common  random  number  streams  were  used  for  variance  reductions. 

When  using  common  random  number  streams  the  modeler 
selects  one  stream  and  a  seed  for  the  stream  and  used  the  same 
number  stream  for  all  corresponding  runs  of  the  network.  If 
multiple  observations  are  taken  per  cell,  the  modeler  selects 
a  different  number  stream  for  those  runs.  In  this 
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experiment  six  random  number  streams  were  used  on  each  run. 
One  random  number  stream  was  used  for  the  MTBFs,  another  for 
the  MTTR  equipment,  another  for  the  MTTR  LRUs,  and  three 
random  number  streams  for  selecting  samples  from  the  uniform 
distribution.  Each  of  these  random  number  streams  used  the 
default  seed  and  the  streams  were  changed  to  obtain  different 
observations  for  the.,  same  factor  levels.  None  of  the  random 
streams  chosen  was  the  default  stream,  thereby  further  re¬ 
ducing  the  variance. 

Replication  Minimization.  With  a  full  factorial  2^ 
experiment  with  three  observations  per  cell  96, runs  of  the 
network  would  be  required  to  gather  the  data  necessary  to 
determine  which  factors  are  significant.  Furthermore,  if 
the  model  had  to  be  run  for  three  different  systems  the 
number  of  runs  would  jump  to  288  and  the  number  of  observa¬ 
tions  would  be  staggering.  Therefore,  preliminary  analysis 
was  performed  to  determine  how  to  reduce  the  number  of  runs 
of  the  network  and  still  obtain  valid  results. 

The  first  analysis  performed  to  minimize  the  number 
of  replication::  required  to  obtain  valid  results  involved 
examining  the  three  systems  being  modeled.  In  all  three 
systems  a  minimum  of  two  repairmen  were  required  to  main¬ 
tain  each. system.  If  no  more  than  two  repairmen  were 
required  to  maintain  the  most  complex  and  largest  of  these 
systems,  then  no  more  than  two  repairmen  would  be  required 
to  maintain  the  smaller,  less  complex  systems.  Furthermore 
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if  only  one  spare  LRU  is  required  to  maintain  the  system 
with  the  lowest  MTBF,  then  the  other  systems  would  also 
require  only  one  spare  LRU  to  support  the  same  amount  of 
equipment  with  a  higher  MTBF.  One  system,  the  ILWSD  and 
ADP  system  has  both  a  lower  MTBF  and  a  larger  more  complex 
system.  Therefore,  the  ILWSD  and  ADP  systems  model  was  run 
to  determine  if  any  of  the  factors  could  be  eliminated  from 
the  model  of  the  other  two  models. 

Even  if  all  of  the  factors  were  found  to  be  insignif¬ 
icant,  and  no  runs  were  required  for  the  two  simpler  models, 
the  full  2^factorial  experiment  would  require  96  simulation 
runs  and  would  produce  an  extremely  large  amount  of  data 
for  analysis.  Therefore,  each  of  the  factors  initially 

j 

considered  for  this  model  was  examined  to  see  if  it  could  be 

J 

eliminated  from  the  experiment.  Maintenance  technicians 
certainly  could  not  be  eliminated  from  the  experiment  be¬ 
cause  determination  of  the  appropriate  crew;  size  is  the  main 
purpose  of  this  model.  Similarly  spares  level  and  reliabil- 

i 

ity  cannot  be  removed  from  the  experiment,  s  However,  changing 
the  MTTR  for  the  equipment  from  .5  hours  to  2.0  hours  will 
have  an  extremely  small  impact  on  the  equipment  reliability. 
For  example,  changing  the  MTTR  for  the  display  computer 
the  equipment  with  the  lowest  MTBF,  from  .5  to  2.0  reduces 
the  availability  of: the  equipment  from  .9998  co  .9992.  Fi-. 
nally,  varying  the  MTTR  LRUs  appears  to  have  a  large  effect 
on  the  amount  of  time  that  the  .  lintenance  technicians  were 


1.23 


busy.  Therefore,  equipment  MTTR  was  eliminated  from  the 
experiment. 

By  eliminating  one  factor  from  the  experiment  the 

number  of  runs  was  reduced  to  48  and  the  experiment  became 

4 

a  full  factorial  2  experiment.  Further  examination  of  the 
model  indicated  that  spares  level  appeared  to  have  little 
impact  on  the  availability  or  the  maintenance  crew  size. 
However,  since  one  of  the  objectives  of  the  thesis  is  to 
determine  the  impact  of  variance  of  spares  levels  it  cannot 
be  eliminated  from  the  experiment.  One  way  of  including  the 
spares  level  into  the  experimental  design  but  still  reduce 
the  number  of  runs  is  a  fractional  factorial  experiment. 

The  problem  of  performing  a  fractional  facte, rial  ex- 

4 

periment  in  a  2  design  is  that  the  first  order  interactions 
are  confounded  with  other  first  order  interactions  and  the 
main  effects  are  confounded  with  the  second  order  interac¬ 
tions.  Fortunately,  if  there  is  good  reason  to  suspect 
that  one  of  the  main  effects  is  insignificant,  the  first 
and  second  order  interactions  associated  with  that  main 
effect  are  also  insignificant.  In  fact,  if  the  main  effect 
were  zero,  the  interactions  containing  that  main  effect  also 
would  be  zero  had  the  confounding  would  be  insignificant. 

For  the  reasons  listed  in  the  above  paragraphs  the 
experimental  design  for  this  thesis  was  reduced  from  a 
full  factorial  experiment  on  three  models  to  a  \  2^ 
fractional  factorial  design.  The  specific  design  used  in 


this  thesis  was  taken  from  Hicks  (Ref  7:308,309).  In  this 
design,  the  full  factorial  2^  design  was  divided  into  two 
blocks  in  which  all  main  effects  were  confounded  with  second 
order  interactions  and  the  first  order  interactions  were 
confounded  with  other  first  order  interactions  which  were 
considered  to  be  zero.  The  resulting  blocks  are  as  follows 

block  I 
block  II 


(1) 

ab 

cd 

abed 

ac  be 

ad 

bd 

a 

b 

acd 

bed 

c  abc 

d 

abd 

After  the  blocks  were  created,  block  I  was  chosen  at  random 
and  the  corresponding  experiments  were  run  on  the  display 
and  ADP  systems  model.  The  runs  associated  with  design  (1) 
had  all  of  the  factors  set  to  the  low  level.,  design  abed 
had  all  of  the  factors  set  to  the  high  level,  design  ab 
had  factors  a  and  b  set  to  the  high  level  and  factors  c  and 
d  set  to  the  low  level,  and  so  forth.  The  results  of  the 
runs  are  contained  in  Appendix  B. 

Analysis  of  the  Observations 

The  model  developed  for  this  thesis  provided  two 
types  of  observations  of  concern.  The  first  set  of  observations 
are  the  equipment  availabilities  and  the  second  set  are 
the  maintenance  technician  utilizations.  Both  equipment 
availability  and  technician  utilization  were  analyzed  using 
Yates  technique  (Ref  7:118,119).  Tables  VI  and  VII  con- 
atin  the  analyses  on  one  set  of  availability  data  and 
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error  .0072  .000448 


ts 


on  the  technician  utilization  data. 

Hicks  describes  Yates  method  as  a  procedure  that 
reduces  the  analysis  to  a  simple  adding  and  subtracting 
of  numbers.  To  perform  Yates  method  of  analysis  the  analyst 
lists  the  treatment  combinations  in  the  first  column  as 
shown  in  Tables  VI  and  VII.  In  the  second  column  the  analyse 
records  the  total  response  to  each  of  the  treatment  combin¬ 
ations.  When  a  fractional  factorial  design  is  used  those 
responses  corresponding  to  treatment  combinations  not  tested 
are  left  blank.  The  third  column  is  labeled  (1)  and  the 
values  entered  in  the  first  eight  positions  are  the  pair 
wise  sums  of  the  responses  listed  in  the  second  column.  For 
example,  in  Table  VI  the  first  entry  is  the  sum  of  2.9845 
and  zero,  and  the  second  entry  is  the  sum  of  zero  and  2.9983. 
The  final  eight  entries  in  the  third  column  is  the  pair  wise 
difference  of  the  entries  in  the  second  column.  For  example, 
in  Table  VI  the  ninth  entry  is  -2.9845,  the  difference 
between  zero  and  2.9845. 

The  entries  in  the  fourth  column,  labeled  (2), are 
obtained  by  pair  wise  addition  and  subtraction  of  the  third 
column.  The  entries  for  the  fifth  and  sixth  columns,  labeled 
(3)  and  (4),  are  obtained  in  the  same  manner.  The  values 
contained  in  the  sixth  column  are  the  contrasts. 

The  seventh  column  contains  the  sum  of  the  squares  of 
the  contrasts.  To  obtain  the  sum  of  the  squares  of  the 
contrasts,  the  analyst  must  square  the  entries  in  the  column 
labeled  (4)  and  divide  the  resulting  number  by  3*2.  where 
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3  is  the  number  of  observations  per  cell  and  2  is  the  full 
factorial  equivalent  of  the  ^2^  factorial  experiment. 

The  sum  of  the  squares  error  and  sum  of  the  squares 
total  must  be  calculated  in  another  way,  however.  The  sum 
of  the  squares  total  is  computed  by  squaring  each  of  the 
original  observations  and  adding  the  results.  In  Table  VI 
the  sum  of  the  squares  total  is:  ( .9999)2+( ,9999)2+( ,9998)2+ 
(. 9999) 2+( .9997) 2+( .9998 )2+( .9995)2+( .9999) 2+(.9992)2+( .9977)2 
+(.9998)2+( .9998) 2+(. 9997) 2+(.9993)2+( .9994) 2+(.9999)2+ 
(.9999)2+(.9998)2+(.9995)2+(.9991)2+(.9997)2+(.9949)2+(.9945)2 
+  (.9951)  *  23.9514.  The.  sum  of  the  squares  error  is  computed 

by  summing  the  squares  of  the  differences  between  the  ob¬ 
servation  ond  mean  value  of  each  cell.  The  sum  of  the  squares 
error  for  Table  VI  is  .00000371. 

The  mean  square  are  computed  by  dividing  the  sum  of 
the  squares  by  the  degrees  of  freedom.  In  this  case  the  mean 
squares  for  the  first  and  second  order  interactions  is  the 
same  as  the  sum  of  the  squares,  and  the  mean  square  error  is 
.00000371/16  -  .00000023. 

To  compute  the  F  significants  of  the  contrasts  the 
sum  of  the  squares  of  the  contrast  is  divided  by  the  sum 
of  the  squates  error  and  compared  to  the  F  statistic  with 
one  degree  of  freedom  in  the  numerator  and  16  degrees  of 
freedom  x.i  the  denominator.  The  F  statistic  for  Tables 
VI  and  VII  are  3.05  for  a  .*0  confidence  level  and  4.49 
fox  a  .05  confidence  level.  All  of  the  F  ratios  in  Table 
71  exdeed  the  F  statistics,  therefore  all  of  the  contrasts 
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and  interactions  are  significant  at  the  .05  level. 

The  Yates  method  was  also  applied  to  the  maintenance 
technician  utilization  data  and  the  results  are  in  Table  VII 
From  Table  VII  it  can  be  seen  that  only  contrast  b  is  insig¬ 
nificant.  Contrast  b  corresponds  to  the  spares  level. 

Appendix  B  contains  the  equipment  availability  and 
repairman  utilization  data  generates  by  the  simulation  runs. 
From  the  data  in  Appendix  B  it  can  be  seen  that  the  data 
analyzed  in  Table  VI  is  representative  of  the  availabilities 
of  all  of  the  equipment  in  the  ILWSD  and  the  ADP  systems. 

The  conclusipns  that  can  be  drawn  from  the  the  results  of 

■ 

this  simulation  program  are  contained  in  Chapter  VI. 
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VI  CONCLUSIONS  AND  RECOMMENDATIONS 


The  final  part  of  the  evaluation  of  a  simulation 
project  is  the  problem  analysis.  In  this  step  the  results 
of  the  simulation  are  evaluated  to  see  if  statistically 
significant  inferences  can  be  made.  The  following  section 
identifies  the  inferences  that  can  be  drawn  from  this 
thesis  effort,  and  the  last  section  identifies  additional 
areas  of  research  that  could  be  performed  on  this  problem. 
Conclusions 

As  stated  in  Chapter  I  the  primary  objective  of 
this  thesis  is  to  develop,  test,  and  validate  a  model 
which  can  be  used  to  determine  the  number  and  skill  level 
mix  of  Air  Force  maintenance  personnel  necessary  to  maintain 
the  electronic  equipment  in  the  upgraded  SAC  Command  Post. 
The  simulation  model  developed,  tested  and  validated  for 
this  thesis  satisfies  this  objective.  Although  the  reli¬ 
abilities  used  in  this  model  may  not  be  the  same  as  the 
reliabilities  of  the  equipment  which  will  eventually  be 
installed  at  the  SAC  Command  Post  and  the  equipment  may 
vary  somewhat  from  the  configuration  used  in  this  thesis, 
the  model  can  be  easily  modified  to  accomodate  any  differ¬ 
ences.  Furthermore,  the  model  shows  that  not.  more  than 
'■wo  technicians,  one.  5-  level  and  one  3- level,  per  crew  nr;-, 
are  required  to  maintain  the  equipment  planned  for  the 
upgraded  SAC  Command  Post. 
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This  thesis  also  has  two  subobjectives.  The  first 
subobjective  is  to  determine  the  sensitivity  of  the  main¬ 
tenance  crew  size  to  variance  in  equipment  reliability  and 
maintainability,  system  size  and  complexity,  spares  level, 
and  system  availability.  The  second  subobjective  is  to 
determine  the  sensitivity  of  system  availability  to  variance 
in  equipment  reliability  and  maintainability,  system  size 
and  complexity,  spares  level,  and  crew  size.  The  following 
subsections  address  these  subobjectives. 

Crew  Size.  The  data  in  Table  VI,  Chapter  V,  illus¬ 
trates  the  analysis  of  the  data  gathered  from  the  simulation 
runs  on  repairman  utilization.  Four  factors  were  analyzed 
in  this  Table:  crew  size,  represented  by  factor  a;  spares 
level,  represented  by  factor  b;  equipment  reliability  (MTBF), 
represented  by  factor  c;  and  LRU  repair  time,  represented  by 
factor  d.  The  first  conclusion  that  can  be  drawn  from  Table 
VII  is  that  the  spares  level  has  no  significant  impact  on 
maintanance  personnel  utilization  for  the  levels  of  equip¬ 
ment  reliability,  crew  size  and  LRU  repair  rates  chosen. 

This  is  apparent  because  the  F  ratio  for  factor  b  is  0.22 
and  the  .10  significance  level  for  the  F  test  is  3.05.  Since 
the  spares  level  is  so  insignificant,  the  first  order  inter¬ 
actions  associated  with  the  spares  level  will  also  be  insig¬ 
nificant,  probably  very  close  to  zero.  Therefore,  the  first 
order  interactions  that  are  confounded  with  the  first  order 
interactions  containing  factor  b  will  not  be  significantly 
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affected  by  the  confounding. 

All  other  main  effects  and  first  order  interactions 
are  significant,  even  at  the  .01  level.  This  indicates 
that  changes  in  equipment  reliability,  LRU  repair  time  and 
crew  size  do  affect  the  amount  of  time  each  maintenance 
technician  works.  The  significance  of  equipment  reliability 
and  LRU  repair  time  is  obvious  since  doubling  the  number  of 
failures  will  double  the  amount  of  work  and  quadrupling 
the  LRU  repair  time  will  increase  the  amount  of  time  spent 
on  each  job.  Similarly,  it  is  obvious  that  increasing  the 
number  of  maintenance  personnel  will  decrease  the  amount  of 
work  each  repairman  must  perform. 

From  the  data  gathered  in  the  simulation  runs  (see 
Appendix  B)  it  can  be  seen  that  two  maintenance  technicians 
would  be  able  to  maintain  the  electronic  systems  described 
in  this  thesis  at  an  availability  greater  than  .99.  In 
addition,  the  policy  in  1AC0MGP  is  to  have  three  shifts 
performing  maintenance:  Day  Shift,  working  from  0730  to  1630; 
Swing  Shift,  working  from  1630  to  2400;  and  Mid  Shift,  work¬ 
ing  from  2400  to  Q730.  With  these  constraints  three  tech¬ 
nicians  would  be  required  on  each  shift  to  provide  seven 
day  a  week  coverage,  and  a  fourth  technician  would  be  re¬ 
quired  to  cover  for  leaves.  This  results  in  twelve  tech¬ 
nicians  to  cover  three  shifts.  If  however  a  rotating 
shift  schedule  were  used  the  number  of  technicians  required 
to  maintain  the  equipment  would  be  reduced  to  10,  five 
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crews  containing  two  technicians  each.  In  addition  to  the 
technicians  on  crew,  the  maintenance  shop  will  require  one 
technician  to  be  the  shop  superintendent.  Since  the  CCTV 
and  the  upgraded  voice  systems  are  smaller  and  have  higher 
equipment  reliabilities  than  the  ILWSD  and  ADP  systems,  two 
maintenance  technicians  per  crew  would  also  be  able  to  main¬ 
tain  the  equipment  in  each  of  those  systems. 

Since  the  exponential  distribution  was  used  to  model 
the  eqipment  reliabilities,  doubling  the  equipment  failure 
rates  is  essentially  the  same  as  doubling  the  size  of  the 
system.  Therefore  the  following  conclusions  can  be  drawn 
from  the  data  in  Appendix  B: 

1.  Increasing  the  number  of  technicians  per  crew 
reduces  the  amount  of  time  each  technician  works, 
but  two  technicians  per  crew  in  each  maintenance 
shop  can  maintain  the  equipment  at  a  greater 
than  99  percent  availability. 

2.  Doubling  the  failure  rate,  or  equivalently  doubling 
the  system  size,  has  a  significant  effect  on  the 
amount  of  time  each  technician  works,  but  with 

1 

the  system  modeled  for  this  thesis  two  technicians 

I 

would  be  capable  of  maintaining  a  system  with 
double  the  failures  and  still  maintain  an  avail¬ 
ability  greater  than  99  percent. 

3.  Quadrupling  the  repair  time  for  the  LRUs  signif¬ 
icantly  affects  the  amount  of  time  each  technician 
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spends  working,  but  two  technicians  are  still 
capable  of  maintaining  an  equipment  availability 
greater  than  99  percent. 

Availability.  The  sensitivity  of  equipment  avail¬ 
ability  to  variance  in  crew  size,  spares  level,  equipment 
reliability,  and  LRU  repair  time  was  analyzed  in  Table  VI. 

From  Table  VI  it  can  be  seen  that  even  though  the  equipment 

s' 

availability  never  dropped  below  99  percent,  all  factors 
analyzed  in  this  thesis  were  significant,  even  at  the  .01 
level.  This  implies  that  large  enough  changes  in  the  equip¬ 
ment  reliability,  system  size,  spares  level,  or  LRU  MTTR  could 
significantly  reduce  the  equipment  availability.  Furthre- 
more,  all  of  the  first  order  interactions  were  significant. 
This  implies  that  changes  in  the  more  than  one  factor  would 
produce  an  even  greater  change  in  the  system  availability. 

Although  all  of  the  factors  analyzed  have  a  significant 
effect  on  the  equipment  availability,  the  modeled,  systems 
would  still  have  an  availability  greater  than  99  percent 
even  if  the  system  size  were  doubled.  This  implies  that  at 
the  reliabilities  used  in  this  model,  there  is  a  great  deal 
of  variance  that  can  occur  before  the  equipment  availability 
is  seriously  affected. 

Recommendations 

The  analysis  performed  for  this  thesis  was  accomp¬ 
lished  using  estimates  of  the  system  design,  equipment 
reliabilities  and  maintainabilities,  and  the  LRU  repair 
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time.  When  the  final  system  design  for  the  upgraded  SAC 
Command  Post  is  determined,  the  model  developed  for  this 
thesis  should  be  modified  to  reflect  any  defferences  and  run 
to  determine  if  the  crew  size  estimated  in  this  thesis 
is  still  valid. 

In  this  thesis  the  systems  were  modeled  to  determine 
how  many  maintenance  technicians  are  required  to  maintain 
the  equipment  modeled.  At  SAC  Headquaretrs ,  however,  there 
are  many  existing  maintenance  shops.  A  study  should  be 
performed  to  determine  if  the  existing  maintenance  shops 
could  maintain  the  new  equipment  with  little  or  no  increase 
in  manpower  requirements.  Possible  maintenance  shops  to 
evaluate  for  this  study  incluse  the  Digital  Television 
Element  (DTVE)  maintenance,  the  SACDIN  maintenance,  and  the 
future  CCPDS  maintenance  shops. 
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PCUE-  SLPFLY  ANC  CHASSIS 

7T  p 

ELSEIF  CGATSBO  .LE.26)  THE** 
TELEVISION  HONITCF  STF IMG 
IF  CPPCfl. LE.r2>  THEM 
LF  =  17.. 

TELEVISION  HC.MTCF 
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*’.V 
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0 


:'  •_  i :  ( •-  I.- .  l  : .  * :  > 

',F  -  .  '  . 

-:clal:zz~ 

£  •_  •  r 

IF  =  1~. 

v:c£f  switch 

S '  CI  F 
£  L  -  ' 

L  A  -  G  £  IC’Z3'  PACOiCT'F  S~3!'iG 
IF  (P-  ;E.l _r.S3  >  TFS\ 

LF  =  > 

*-  R JF  C  ~  ■.  - 

£1.: IF  (F-CK.L  £.SZ>  THE' 
t  .  F  =  2  _> 

TQUALIZ  —  A ’■•PL  I  r  I  £  • 

;  L  £ 

i  c  -  ’ 

v:s-:-:  switch 

£  . ,  r  *  p 

-  r  *  c 

>:  r  l  \ 


»«r  -  **■*  •»**«*****»**• 

fFFtr:  'Ft  CF  ca:3Mf»-  3EQt:«ro  TC  fix  THE  sts? 

I  *  *  *-4  t  *****  •*  ************  ****y****„  ********  ******* 

4  :f  <GATPB(3).£C.i7,FF.GAr“B(3)«EQ«2J)  THP‘! 

L  F  =  2.2 

TV  FCMTC*  CF  PFC^ECTCF 

-:li: 

L  F  =  1  .  C 

ALL  C  T  n  Z  ?  SYSTEMS 

z  .c: f 

.- : r  l  ,•  \ 


c:vpltf  -:fa:~  -:r*r  ;f  3-iev:l  assists  iv  ?:ca: 


LF  =  S  A  T  ^  0  <  3  >  «  L  V  <  1  r>  ) 
-  F  T  L  “  V 


* 

•  ? 
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ECJ-C  ’ME  T.”E  TH  A  '  THE  EY'.TEm  3TA “ TEQ  CPE7  fiT  I C  *: 


*  A  7  A  8  =  A  T  R  H  •  ♦  1.: 

'  U  Yi  =  I  f .  T  C  A  T  q  Q  ?  > 
AVAILCMJFa*l  )  =  GATPflCl) 

AVAILCNUP^)  =  tncw 

IF  =  A  TF  8  ! 

~ETLGN 


CETE"MINE  THE  SKILL  LEVEL  ?F  THE  *iEXT  REP  AIR  PAN  ASSIGNED 

►  »  «  ««*«<!«»  «  *  «  *  •«•»*#  #••*****♦♦*  «+»***♦*  **•+»*+*  *  *  *  ♦  ’•*  *  *  *  *  *  ♦  *  •> 

7  IF  (  .lA’-HtE  )  .Gi.  1.  *  .AVD.^AT^Pt?  >  ■*•'*,  A  ”  3  8  C  a  >  «G"  .GATSRtf  )  )  ’■he;.; 


L c  - 

/» 

«  • 

•  »v 

» 

i  L .'  £ 

LF  = 

GATPg  iz  ) 

*>; 

X  OIF 

RETL-.N 

$ 

*  *  *  ♦ 

♦  #>  «•  »  Ml 

y 

'ECC-.C 

THE  7  X  PE  CF  E 

*  »  «  « 

. « 

•  ‘UK  a 

INTCGATfiBUM 

AVAIL<MJY3  »2  )  =  TNCW 

•V. 

LF  =  G ATFE  <  l  ) 

m 

■RETURN 

♦ 

* 

'  *  ♦ 


ECCTC  THE  T XFE  THAT  REPAIR  CF  EACH  LRU  3 T A R T E C 


MIPS  =  iNTCGATFRCS >> 

A  VAX  L<NljPb,A  >  r  3ATFB  (A  ) 
AVAILCNU'*  *«E  )  =  TNCW 
LF  =  GATFE  <•!  ) 

RETURN 


:  ECC r  C  THE  t  t  £  tM7  EACH  L^U  REPAIR  WAS  CCPFLETEC 


IT 


MJF-  =  iNTCGATRBfE  )  > 
AVAIL  CMJFRt^)  =  TNCW 
LF  =  GAT’HCE) 

: :  u  ■  n 


146 


1  T»  «■>■■ 


9mr*9**vm 


C  .  =  L  T  \ 


tive  u:th  spa-.e  Lr 


1: 


:f  (GA7.~e<i )  .ne.:c.c?.ga7:»b<i  >.ne.i2  >  then 
LF  s  LC  (22) 
i  '  Cl F 
cE7ljPN 


12  MjA?  =  I.’.T  (6A*f=B(*  >  > 

AVAI l<\UVft,7>  =  TNCU 
A  V£  I  L  ( .\U  v  i  »E  )  =  T.\CW 
LF  =  1AT-H(  ) 

'-ZT'jr.r, 

♦  v  -  »«#*»**»*•*  *»**%+4**«#***«**  «»»****•*«•+«  I*  «  »  t  t  t  *» 

*  * 

»  eccrypr  ^£FA:r  cf  <FA  FE  FC9  FAILED  SYSTEV 

**»••*»  *■«•■*•»**■•«**•**«*•**••*»•*■*«***•***■**■■*****■****■*****■•**•**»■%-*»** 

12  :FC:STU£.C‘5.5>.6T.S  •  AND*IC$?A(1)-*IC3?A(2)«LT  *3  AT  ^8(2)  )  THEN 
CALL  Sr«fiC(S»<)vd.l9c«ATT) 

FAXMT*f*\C  SEP VE“2  AVAILABLE* 

ENDTF 

LF  =  GA7;>8(=) 
r  FTL  3N 


CETEoYI?4E  IF  A  3-LEVEL  SHOULD  BE  ASSIGNED  * 


1*  IFdCSFA  <2  ).EQ.C- •AfiC.GA-FB  (E  ).EQ.l )  LF  = 
"ETLr.N 

s'  C 
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:u: '  lt:  •  l  : 


;w::  ucr  '  itP-cu-:'  r  m-’s  'he  data  gath-fec  cu-:mi  the 

-u-.:  A '  C  P-‘**3  A  H  :  jTC.nV  Cp  TH£  3Y‘*£«  *  P  E  3  A  T  I C  \ 

F  A  I  LtP  £w  »  A-\  Q  F  £  p  A I  n  ACTIVITIES*  THEN  COMPUTES  A  \Q  P"INT 
THE  AVAlLABiLITV  OF  EACH  SYSTEM 


COwv'N  /HAL/  AVAIL<  :  :  .  , 7>  ,ATRB 
CHAR  AC~Z?.*fi  -GLlPtLPL 
FEAL  EGAVtA**) 


T  A"'^Ay  £ Q A V  EQUAL  TO 


c  ■:  - . :  c  = :  ♦  l  h 
scav<: >  =  . , 
CONTINUE 


SOFT  THE  QAr A  BASED  CN  THE  FAILU°E  T;ME  OF  THE  SYST£i 


'■0  I  si  «  A  7R  B!> 

60/  0=1  t ATS  PS 

IF  <AVA;L(I»3I.Gt.aVAILCJ*3)>  thE*J 


avail:  =  a 
avails  =  t 

AVAIL3  s  A 
AVAIL4*  =  A 
AVAILS  =  A 
AVAIL6  =  A 
AV  A  I L  7  =  A 
AVAIL  (  I  «I  ) 
AVAIKI  ,£) 
AV  A I L  (  I  #  3  ) 

avail  c: » a» 
availc :♦£) 

AVAlLCIfd) 
AVAILt  I* 7) 
AV  A  I L ( J  » !  ) 
A  V  A IL  («i  * 2  ) 
AVAILCl,3> 
AVAIL  <J,  A> 
AVAILCJ* E> 
AVAILUte) 
AVAIL<U*  7) 
E  CIF 
vtinle 
i.NLC 


AVAlLCIfl  ) 

AVA IL ( I #2  ) 
AVAIL(I,3) 

A  VAIL  (I 
AVAILCI *5  > 
AVAIKI, 6) 
AVAIL  (I, 7) 

=  AVAlLCJfl) 
=  AVAIL(J,2) 

=  ava:l(j,3) 

=  AVAILtJfA) 

-  A  VAIL  < J  ,  E  I 

-  «VAIL(J,6) 
=  AVAIL(J,7) 
=  AVAILI 

=  AVAIL! 

=  AVAIL3 
=  AVAIL* 

=  AVAILS 
=  AVAILS 
=  AVAIL7 


•  V 


•  t  «  *  *  »  » 


v*  • 


*  • 


*  t«»»«******«*«*««*-t*  *  *  - 


♦ 


FdNTMI  X,  «  dFEnATING  TIME***2EX.«*L*U  At  FAI?  ▼:«»£•»>'* 
?4I\T*(*»  EGUIPv£NT**»7X»**STA;<T»*«SX.**FA:LLFE**,7X. 

♦  »*SEPLACE0**»7X.**STAfi7*3,7X.**F:MSH**)« 
rA!f,’M*»  NAME  *  * .^  X  »  *  *OAY  TIME  DAY  TIME**.7X, 

♦  «*LPL**»-;X.*  *CAY  TI»*E  DAY  TIME**)* 

CT  10  I  =1  .A7FE/3 

NLMi  =  INMAVAILd  .1  )  ) 

NLK4  =  INTCAVAIL'flfA)) 


CDPLTE  7h£  SYoTEK  AVAILAB  ILIC  E3  * 


m  r 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

T  C 

*  I 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 

IF 


( NUM1 •£  G .1 ) 
(NUM1.EG.2) 
(MJ*1.EC.3) 
(.\UKi.EG.4) 
CiUKl.EG.3) 
(NUKl.EG.fc) 

( NUK1. £  G .7) 
CNUM1.EG.:.) 
(NUMl.iG.3) 
fNUKl.C6.lsi  ) 
(NUMl.EG.lt ) 
(No Ml. EG .12) 
(VUK1.EC.13  ) 
(.'iUMl.EG.14  ) 
(NUM1.EG.13) 
(NUM1.E6.IE.) 
(\LK1.EC.1?) 
(NUMl.EQ.l? ) 
(NUK1.EG.1?) 
('JUKI. EG. 2-  ) 
(NUKl.EG.2l  ) 
(NUKl.EG.22 ) 
(NUMl.tG.23  ) 
(NUKl.tG.24 ) 
(VUK1.EG.25) 
(NUM1.EG.26 ) 
(NUK1.EG.27  ) 
(NUK1.EC.23  ) 
(NUKl.EG.t5'  ) 
(‘JUKI.  EG.  31  ) 


ECAV(l)  =  EGAV(l)  * 

EGA V ( 2  )  =  E  GA  V ( 2  )  ♦  (  AV  A  IL  (  I  .3  )- A  VA  I L  (I  .  2  ) ) 

EG  AW ( 2  )  =  EGAVdj-)  ♦  ( A V A IL ( I  .  2  ) - A  V  A  IL ( I  *2 > > 

EQ A V ( 4  )  =  EQAV(4)  ♦  ( A VA I L ( I . 3 )- A V AIL (I *2  ) ) 

E Q  A  W ( E )  =  E  QAV ( 5  )  +  ( AVAIL ( I .3 >-A V AIL ( I  •  2 )  ) 

EG  A  V ( 6 )  =  EQAV(S)  ♦  (  A  VA  IL  (  I  .3  )-A  VA  !  L  ( I  .2  )  > 

E G  AV( 7 )  =  EQ AV( t)  ♦  ( AV AIL ( I *3 )-A VAIL ( I  .2 )  ) 

E G  A  V (  "  )  =  EQAVC-  )  ♦  (  AV A  IL  (  I  •  2  )-A V  AIL  ( I  .2  ) ) 
EGAVO  =  EOAV(tI)  ♦  (AVAIL(  I  .2)-AVAIL(I  .2)  ) 

(AVAILC, 3)-AVAIL(  1.2) ) 
(AVAILd  *3)-AVAlL(I«2)  > 
(avail(:»2>-ava:l(:,2) ) 

(AVAILC. 3  )"AVAIL(I.2> ) 
(AVAILd  *2>-AVAIL(I  *2)  ) 
(AVAILd. 3)-AVAIL(I*2)  ) 
(AVAILC. 2  )-AVA[Ld*2)  ) 
(AVAIL(I.  2>-AVAILd.  2)  ) 
(AVAILd.  3>-AVAIL(I.  I)  ) 
(AVAILd.  2)-AVAILd.  2)  ) 
(  AVAILd  .2)-AVAIL(I  .2)  ) 
(AVAILd  *2  )-AVAIL(I  .2)  ) 
(AVAILd  .3)-AVAIL(I.2>  ) 
(AVAILd  .2)-AVAILC  ,2  )  ) 
(AVAILC. 3)-AVAlL(I.2)  ) 
(AVAILd  .3  )-AVAIL(I  )  ) 
(AVAILd. 3)-AVAIL(I. 2)  ) 
(AVAILd  .3) "AVAIL(I  .2)  ) 
(AVAIKI  ,2  )-AVAIL(I  .2  )  ) 
(  AVAILd  .3  )-AVAIL(I  .2  )  ) 
(AVAILd.  3)-AVA:L(I.  2)  ) 


ECavc:  > 

S 

EGAVdO  ) 

♦ 

EGAV (11 ) 

- 

EGA  \/(  1 1  ) 

♦ 

EGAV(12) 

s 

EOAV(12 ) 

♦ 

ECAV(12) 

r 

EQAV(13 ) 

♦ 

EGAV(ia) 

s 

EGAV ( 14) 

♦ 

EGAV(IE) 

= 

E  QA  ^(  1  5  ) 

♦ 

EGAV(IE) 

- 

EQA\|(1£  ) 

♦ 

EGAV (17) 

r 

EQAV(IT) 

♦ 

£GmV(13) 

s 

E  OA (  1  ;■}  ) 

♦ 

ECAVC*) 

s 

EGAV ( IF ) 

♦ 

EGAV (2  ) 

r 

E0AV(2" ) 

♦ 

EGAV(21) 

s 

EQAV(21 ) 

♦ 

EGAV ( 22  ) 

r 

EQAV( 22 ) 

♦ 

E  GAV (23 ) 

r 

EQAV( 23 ) 

♦ 

E  GA V ( 24 ) 

r 

EQAV(24) 

♦ 

EG  AV ( 23 ) 

s 

EQAV( 23 ) 

♦ 

E  GA  V  (  2  £  ) 

s 

EGAV (2E ) 

♦ 

E  GA V ( 2  7) 

= 

EQA V(27 ) 

♦ 

EGAV(2-  ) 

r 

EQAV (28 ) 

♦ 

E G A  V ( 2C  ) 

r 

EGA V( 23 ) 

♦ 

E  G  A  V  (  3 1  ) 

s 

EQA V ( 3o ) 

♦ 

THIS 

PAGE 

IS 

MISSING 

IN 

ORIGINAL 

DOCUMENT 


(  ,  -  • : 

<  \  j  '  i 

<  vim 


.=  c.:*! > 

•  r.  G  «  3  O 
(NUM.EG.33  ) 

cnum.eg.  is  ) 
cnum.eg.??) 

(NUM.EG.33) 
CNUyi.PC.39 ) 
(NUwi.EG.4l  ) 
(VJM.EG. 41 ) 
(NUMl.EG.AI ) 

(NUM1.£Q.43) 

CMJyi.fcG.44) 


L  G  -  V  (  ’ .  ) 
£CAV( 32  > 
EGAV<3!  ) 
EGAVCIO 
EGAVC35) 
£  GA V ( 3S ) 
EGAVC3?) 
£  G A  V (3  i  ) 
EQAVC3-) 
EGA  VC  47 ) 
EGA  VC  41  ) 
EGAVC4C) 

EGA  V  C  43  > 
EGAVC44) 


r 


i****««*«»i*ti»«t«****»*** 


EGA  VC  ?!  )  ■» 
~  3  A  V  C  3  2  )  ♦ 
EGAVC33)  ♦ 
EGA VC  34)  ♦ 
EQAVC33)  ♦ 
EQAV(3fi)  ♦ 
EQAVC37)  ♦ 
EQAVC33)  ♦ 
E0AVC39)  ♦ 
EQAVC4Q)  ♦ 
EQAVC41)  ♦ 
E0AVC42)  ♦ 

EQAVC43)  ♦ 
EQAVC44 )  ♦ 

r  3  ...»  ****.' 


cavailc:  .z  > 
cAva :l  <:  .3  > 
c ava :lc:  .2  > 
cava:lci  .3) 

CAVAILCI *3  ) 
CAVAILCI ,3) 
CAVAILCI ,2  ) 
CAVAILCI *3) 
CAVAILCI *2 > 
CAVAILCI. 3 ) 
(AVAIL  Cl .3) 
CAVAILCI.?) 

CAVAILCI ,3) 
CAVAILCI*?) 


'E'MI-.E  THE  NAME  CF  THE  FAILED  SYSTEM 


■  A  V  A I  C  I 
•AVAIL  Cl 
■AVAILC 
•ava: i  c4 
•AVA!  LC  I 
•  A  V  A I  L  C  I 
•AVAILCI 
■AVAILCI 
•AVAILC 
•AVAI LC 
•AVAILCI 
•AVAILCI 

•AVAILCI 

•AVAILCI 

»*  **  *  -v  *  * 
* 
* 


(MUM. EG.:  ) 
CAUy  1.EG.2 ) 
CNUM.EG.3) 
(NUM.EG. 4) 
CNUMl.EG.S) 
(NUM.EG.fi) 
CNllMl. EG. 7) 


EQUIP 

EGUIP 

EGLIP 

EQUIP 

FGUIP 

EQUIP 

EQUIP 


♦AD? 

♦  ADP 
•ADP 
•ADP 
•AGP 
•ADP 

*  A  De 


IF 

(NUM.EG.  •} 

ECU  IF  s 

t 

ADr  o  • 

IF 

(NUM.EC.E) 

EQUIP  = 

f 

ADP  9  • 

IF 

cnumi.eg.ii ) 

EQUIP 

- 

•ADP  1C* 

IF 

CNUPl.EG.il  ) 

EGUIP 

r 

*0  COMP 

1* 

IF 

(NUM.EG. 12) 

EGUIP 

= 

•D  COMP 

2* 

IF 

CMJMl.c6.13 ) 

EGUIP 

s 

•CF  COMP 

• 

?p 

CNUPl.tQ.14 ) 

EGUIP 

r 

•D  DISK 

1* 

IF 

CNUP1.EG.15 ) 

EGUIP 

= 

•D  DISK 

2* 

IF 

CNUPl.EG.li) 

EGUIP 

s 

•CP  DISK 

• 

IP 

CNUwi.EG.17) 

EGUIP 

s 

•VIO  F3 

1* 

IF 

CNUP1.E5.13 ) 

EGUIP 

— 

•VIO  PS 

2  * 

IF 

(NUM  1.EQ.19 ) 

EQUIP 

- 

•IV  GEN 

1* 

IF 

CNUPl.EG.27  ) 

EGUIP 

r 

•Iv  GEN 

2* 

IF 

(NUM.EG.  21  ) 

EGUIP 

r 

•  ?  M  SEN' 

3* 

IF 

CNUP1.EG.22 ) 

EGUIP 

r 

•If*  GEN 

4  • 

IF 

(NUM1.EQ.23 > 

EGUIP 

= 

•iv  GEN 

5» 

IF 

CNUP1.E  G.24 ) 

EGUIP 

r 

•iv  SEN 

6* 

IF 

CNUM1.EQ.25) 

EGUIP 

r 

•TV  MCN 

1* 

IF 

CNUPl.Efl.2S) 

EQUIP 

r 

•TV  MON 

2* 

IF 

C NU'P  1  .E S .27  ) 

EGUIP 

- 

•TV  VON 

2* 

IF 

C'iUM  1. EG .2  •  ) 

EGUIP 

= 

•TV  MSN 

4* 

IF 

CNUMl.EC.29 > 

EGUIP 

s 

•TV  MCN 

5* 

IF 

(NUM.EG.  3  ) 

EGUIP 

r 

.tv  MIN 

6  * 
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•Tv 


•T  •.* 


*  c 

('  l  •  l.  : : . r. ) 

ecu: f  - 

•"V  M'.'i  ' » 

.  ^ . 

I  r 

C  ‘  U  1  •  1 . 3  ;  ) 

ECU  I?  r 

•  7  \J  Mir;  t 

0 

*  C 

C \ U F  1.ZG.33) 

ECU  IF  = 

•TV  r  * 

IF 

EG.  34) 

ECU  IP  = 

•  ~  V  m  INI'.* 

g: 

*  c 
■  1 

CNU  *'!•££  .25  > 

E  GUI P  = 

•TV  MCMll* 

IF 

<\Uy;.EG.3S ) 

ECU  IP  = 

*  '  V  M  3  N 1 2  • 

IF 

OiUMl.CG.37 ) 

E  GUI P  = 

•P-QJ  1 • 

IF 

CNUM1.EC.2,?  > 

EGUIF  = 

•PFOJ  2* 

n 

IF 

CNUM1.EG.3? ) 

ECU  IP  = 

•F50J  3* 

IF 

CNUM1.EG.41  1 

EGUIP  = 

•PPOJ  4* 

IF 

CNUM1.EQ.41 ) 

EGUIP  - 

•P?CJ  5* 

IF 

CNL-1.EG.42  ) 

EGUIP  = 

•  F-OJ 

IF 

CNUM1.EC.43  > 

EGUIP  = 

«  o  e  -j  j  7  * 

IF 

CNUF  l.CC.4« J 

EGUIP  = 

*  F  ;  C  J  r  • 

1 

«  «  #•  V  ! 

iA\ 

•  ■ 

C  F  7  E  - 

MINE  THE  NAME 

CF  THE 

FAILED  L*U 

c.\um4. eg.:  ) 
<N*j*4.EQ.2 ) 
CNUM4.EG.3* 

<  NUM4. E  6. 4  > 
CNUM4.EG.S) 
CNUM4.EG.O 
CNUM.EC.7) 
<NUF4.EG.SI 
CNUM4.E  G.S  > 
CMJF4.EG.1-'  » 
C. MUM4.EQ.il  ) 
OiUM4.EQ.12 > 
CNUM4.EG.13 ) 
CNUF4.EG.14 ) 
CNUF4.EG.15  > 
C,\UM4.£G.16  I 
CNUM4.EG.17) 
CMJM4.£G.1S  J 
CiNUF4.EG.19  ) 
< NUM 4 •£  Q • 2 '  ) 


LFL 
LPL 
L?L 
LFL 
LPL  : 
LFL  = 
LRL  : 
LPL  J 
LSL  : 
LRU 
LFU 
LEU 
LCU 
LFU 
LFU 
LFU 
LFU 
LFU 
LFU 
LEU 


•  rr  p  v  • 

**-ncY  * 

•LAN  :u» 
•CPU* 

*V£M* 

•DISK  IF* 
•IFB* 

•PS  PCAF.D* 
•!G  IF* 
•CHASSIS* 
•DISK* 
•VIOEO  PS* 
•PRCC* 

•  orp  prv# 

•BLNK  CTL* 
•PS  CHAS* 
•TV  «ON* 
*EQ  AM P* 
•VIOEC  SU* 
•PPOJ* 


CONVERT  RUN  TIME  INTO  OATt  HCU?»  AND  MINUTE 


mmm 


r  a  y  1 

:  A  Y  a  ;  ;  *  2  )  /  2 
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